header: fix auth handles #23

	name: "[MAIN] Docker Image Build and Publish"

	on:
	push:
	branches: ["main"]

	env:
	# Use docker.io for Docker Hub if empty
	REGISTRY: ghcr.io
	# github.repository as <account>/<repo>
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	ghcr:
	name: Deploy to GitHub Container Registry
	runs-on: ubuntu-latest

	permissions:
	contents: read
	packages: write
	# This is used to complete the identity challenge
	# with sigstore/fulcio when running outside of PRs.
	id-token: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3

	# Workaround: https://github.com/docker/build-push-action/issues/461
	- name: Setup Docker buildx
	uses: sigstore/[email protected]
	- name: Check install!
	run: cosign version

	- name: Login to GitHub Container Registry ${{ env.REGISTRY }}
	if: github.event_name != 'pull_request'
	uses: docker/login-action@v1
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ secrets.GHCR_USERNAME }}
	password: ${{ secrets.GHCR_TOKEN }}

	- name: downcase REPO
	run: echo "REPO=${GITHUB_REPOSITORY,,}" >>${GITHUB_ENV}

	- name: Build and Push Docker Image
	run: \|
	export CURRENT_BRANCH=${GITHUB_REF#refs/heads/}
	export TAG=$([[ $CURRENT_BRANCH == "main" ]] && echo $CURRENT_BRANCH \|\| echo "latest")
	export GITHUB_REF_IMAGE=ghcr.io/netsepio/sotreus:$GITHUB_SHA
	export GITHUB_BRANCH_IMAGE=ghcr.io/netsepio/sotreus:$TAG
	docker build -t $GITHUB_REF_IMAGE -t $GITHUB_BRANCH_IMAGE .
	echo "Pushing Image to GitHub Container Registry"
	docker push $GITHUB_REF_IMAGE
	docker push $GITHUB_BRANCH_IMAGE

Provide feedback