Push pkg (#19)

* push pkg during build

* push for each branch

* get the branch via gh context

* correct substitution

* login to docker registry and pin deps

* syntax fix

* always set dev tag

Author: kommendorkapten

.github/workflows/docker.yaml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+  pull_request: {}
 
 permissions: {}
 
@@ -22,15 +23,21 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: Build and push image
         id: push
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         with:
           context: .
           push: true
-          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev
       - name: Attest
-        uses: actions/attest-build-provenance@v2
+        uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v 2.2.3
         id: attest
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

Makefile

@@ -1,4 +1,4 @@
-REPOSITORY ?= github/artifact-attestations-opa-provider
+REPOSITORY ?= ghcr.io/github/artifact-attestations-opa-provider
 TAG ?= dev
 IMG := $(REPOSITORY):$(TAG)
 

charts/artifact-attestations-opa-provider/templates/deployment.yaml

@@ -19,7 +19,7 @@ spec:
       serviceAccountName: {{ .Values.serviceAccount }}
       automountServiceAccountToken: true
       containers:
-      - image: github/artifact-attestations-opa-provider:dev
+      - image: ghcr.io/github/artifact-attestations-opa-provider:dev
         imagePullPolicy: IfNotPresent
         name: artifact-attestations-opa-provider
         securityContext: