ci: ensure we don't push manifest list

Author: sorah

.github/workflows/ci.yml

@@ -33,6 +33,8 @@ jobs:
           context: '.'
           load: true
           tags: "rko-router-test:latest,${{ steps.login-ecr.outputs.registry }}/rko-router:${{ github.sha }},${{ steps.login-ecr.outputs.registry }}/rko-router:latest"
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
       - name: 'Start container for test'
         run: |
           set -x
@@ -52,11 +54,24 @@ jobs:
           export TARGET_HOST="http://$(docker port rko-router-dut 8080)"
           bundle exec rspec -fd || ( docker logs rko-router-dut; false )
       - name: 'Push Docker image'
-        uses: 'docker/build-push-action@v5'
+        uses: 'docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8' # v6.19.2
         with:
           context: '.'
           push: true
           tags: "${{ steps.login-ecr.outputs.registry }}/rko-router:${{ github.sha }},${{ steps.login-ecr.outputs.registry }}/rko-router:latest"
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+      - name: 'Push Docker image'
+        uses: 'docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8' # v6.19.2
+        with:
+          context: '.'
+          push: true
+          tags: "${{ steps.login-ecr.outputs.registry }}/rko-router:${{ github.sha }}-amd64"
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          # Lambda does not support manifest list
+          sbom: false
+          provenance: false
 
   deploy-lambda:
     name: deploy-lambda