Bump actions/checkout from 4.1.3 to 4.1.4 #224

	---
	name: Publish Container image to GH Packages

	on:
	pull_request:
	branches: [master]
	paths-ignore:
	- '*.md'

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref_name }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	gh_container_registry:
	name: Push Docker image to GitHub Packages
	runs-on: ubuntu-latest
	permissions:
	packages: write
	contents: read
	id-token: write # needed for signing the images with GitHub OIDC Token
	steps:
	- name: Checkout
	uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4

	- name: Set up Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0

	- name: Install cosign
	uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0

	- name: Log in to GitHub Container Registry
	uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Build and push
	id: docker_build
	uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
	with:
	context: .
	push: true
	sbom: true
	tags: ghcr.io/${{ github.repository }}/ghcr-test:${{ github.sha }}

	- name: Sign the images with GitHub OIDC Token
	env:
	DIGEST: ${{ steps.docker_build.outputs.digest }}
	TAGS: ghcr.io/${{ github.repository }}/ghcr-test
	run: cosign sign --yes "${TAGS}@${DIGEST}"

	- name: Image digest
	run: echo ${{ steps.docker_build.outputs.digest }}

Provide feedback