feat: sso security patch through 7.6-25 (#311) #35

	name: Create and publish Keycloak Docker image - Dev

	on:
	push:
	branches:
	- 'dev'

	env:
	GITHUB_REGISTRY: ghcr.io
	REDHAT_REGISTRY: registry.redhat.io
	IMAGE_NAME: bcgov/sso

	jobs:
	build-and-push-image:
	runs-on: ubuntu-20.04
	permissions:
	contents: read
	packages: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3

	- name: Log in to the GitHub Container registry
	uses: docker/login-action@v2
	with:
	registry: ${{ env.GITHUB_REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Log in to the REDHAT Container registry
	uses: docker/login-action@v2
	with:
	registry: ${{ env.REDHAT_REGISTRY }}
	username: ${{ secrets.REDHAT_USERNAME }}
	password: ${{ secrets.REDHAT_PASSWORD }}

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v1

	- name: Cache Docker layers
	uses: actions/cache@v2
	with:
	path: /tmp/.buildx-cache
	key: ${{ runner.os }}-buildx-${{ github.sha }}
	restore-keys: \|
	${{ runner.os }}-buildx-

	- name: Build and push Docker image
	uses: docker/build-push-action@v3
	with:
	context: docker/keycloak
	push: true
	tags: ${{ env.GITHUB_REGISTRY }}/${{env.IMAGE_NAME}}:dev
	file: docker/keycloak/Dockerfile-${{ startsWith(github.ref, 'refs/tags/7.4-37') && '7.4-37' \|\| '7.6' }}
	cache-from: type=local,src=/tmp/.buildx-cache
	cache-to: type=local,dest=/tmp/.buildx-cache-new

	# Temp fix
	# https://github.com/docker/build-push-action/issues/252
	# https://github.com/moby/buildkit/issues/1896
	- name: Move cache
	run: \|
	rm -rf /tmp/.buildx-cache
	mv /tmp/.buildx-cache-new /tmp/.buildx-cache

Provide feedback