Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 #219

	---
	name: Publish Container image to GH Packages

	on:
	pull_request:
	branches: [master]
	paths-ignore:
	- '*.md'

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref_name }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	gh_container_registry:
	name: Push Docker image to GitHub Packages
	runs-on: ubuntu-latest
	permissions:
	packages: write
	contents: read
	id-token: write # needed for signing the images with GitHub OIDC Token
	steps:
	- name: Checkout
	uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2

	- name: Set up Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0

	- name: Install cosign
	uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0

	- name: Log in to GitHub Container Registry
	uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Build and push
	id: docker_build
	uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
	with:
	context: .
	push: true
	sbom: true
	tags: ghcr.io/${{ github.repository }}/ghcr-test:${{ github.sha }}

	- name: Sign the images with GitHub OIDC Token
	env:
	DIGEST: ${{ steps.docker_build.outputs.digest }}
	TAGS: ghcr.io/${{ github.repository }}/ghcr-test
	run: cosign sign --yes "${TAGS}@${DIGEST}"

	- name: Image digest
	run: echo ${{ steps.docker_build.outputs.digest }}

Provide feedback