Publish new image of rollouts binary #10

	name: Publish new image
	run-name: Publish new image of rollouts binary

	on:
	push:
	branches:
	- main
	paths-ignore:
	- '.github/workflows/harvestr-update-discovery.yml'
	permissions:
	packages: write
	attestations: write
	contents: read
	id-token: write
	pull-requests: write

	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	publish:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v3
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v2
	- name: Log in to GitHub Container Registry
	uses: docker/login-action@v2
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- name: Build and push Docker image
	uses: docker/build-push-action@v4
	id: push
	with:
	push: true
	tags: \|
	${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}:${{ github.run_number }}
	- name: Generate artifact attestation
	uses: actions/attest-build-provenance@v3
	with:
	subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
	subject-digest: ${{ steps.push.outputs.digest }}
	push-to-registry: true
	cleanup:
	name: ghcr.io cleanup action
	runs-on: ubuntu-latest
	permissions:
	packages: write
	steps:
	- uses: dataaxiom/ghcr-cleanup-action@v1
	with:
	keep-n-tagged: 5
	delete-ghost-images: true
	delete-orphaned-images: true
	delete-untagged: true
	packages: ${{ env.IMAGE_NAME}}

Provide feedback