Update docker-publish.yml

.github/workflows/docker-publish.yml

@@ -71,16 +71,46 @@ jobs:
 
       # Build and push Docker image with Buildx (don't push on PR)
       # https://github.com/docker/build-push-action
-      - name: Build and push Docker image
-        id: build-and-push
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+      # - name: Build and push Docker image
+      #   id: build-and-push
+      #   uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+      #   with:
+      #     context: ./docker
+      #     push: ${{ github.event_name != 'pull_request' }}
+      #     tags: ${{ steps.meta.outputs.tags }}
+      #     labels: ${{ steps.meta.outputs.labels }}
+      #     cache-from: type=gha
+      #     cache-to: type=gha,mode=max
+
+      - name: Docker Buildx Bake
+        # You may pin to the exact commit or the version.
+        # uses: docker/bake-action@511fde2517761e303af548ec9e0ea74a8a100112
+        uses: docker/bake-action@v4.0.0
         with:
-          context: .
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          # Builder instance
+          #builder: # optional
+          # List of bake definition files
+          files: docker-compose.yaml
+          # Working directory of bake execution
+          #workdir: # optional, default is .
+          # List of bake targets
+          targets: my_example # optional
+          # Do not use cache when building the image
+          #no-cache: # optional, default is false
+          # Always attempt to pull a newer version of the image
+          #pull: # optional, default is false
+          # Load is a shorthand for --set=*.output=type=docker
+          #load: # optional, default is false
+          # Provenance is a shorthand for --set=*.attest=type=provenance
+          provenance: # optional
+          # Push is a shorthand for --set=*.output=type=registry
+          push: true # optional, default is false
+          # SBOM is a shorthand for --set=*.attest=type=sbom
+          sbom: true # optional
+          # List of targets values to override (eg. targetpattern.key=value)
+          #set: # optional
+          # Remote bake definition to build from
+          #source: # optional
 
       # Sign the resulting Docker image digest except on PRs.
       # This will only write to the public Rekor transparency log when the Docker