Merge pull request #507 from spinframework/dependabot/go_modules/gink… #262

	name: Build shim-downloader image, sign it, and generate SBOMs

	permissions:
	contents: read

	on:
	workflow_call:
	outputs:
	digest:
	description: "Container image digest"
	value: ${{jobs.build.outputs.digest}}

	push:
	branches:
	- "main"
	- "feat-**"

	jobs:
	build:
	uses: ./.github/workflows/container-image.yml
	permissions:
	contents: read
	packages: write
	with:
	image-name: shim-downloader
	dockerfile: ./images/downloader/Dockerfile
	docker-context: ./images/downloader
	push-image: true

	sign:
	needs: build
	uses: ./.github/workflows/sign-image.yml
	permissions:
	packages: write
	id-token: write
	with:
	image-repository: ${{ needs.build.outputs.repository }}
	image-digest: ${{ needs.build.outputs.digest }}

	sbom:
	needs: build
	uses: ./.github/workflows/sbom.yml
	permissions:
	packages: write
	id-token: write
	with:
	image-name: shim-downloader
	image-digest: ${{ needs.build.outputs.digest }}

Provide feedback