chore: add attestation to regular docker publish action, remove extra test action

Author: jescalada

.github/workflows/docker-publish-attestation.yml

@@ -10,31 +10,25 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Checkout Repository
         uses: actions/checkout@v6
 
-      - name: Build Docker Image
-        shell: bash
-        run: |
-          docker build -f ./Dockerfile -t finos/git-proxy:latest .
-
-      # - name: Scan Image with Trivy
-      #   uses: aquasecurity/trivy-action@0.28.0
-      #   with:
-      #     image-ref: finos/git-proxy:latest
-      #     format: table
-      #     exit-code: '1'
-      #     severity: HIGH,CRITICAL
-
       - name: Log in to Docker Hub
         if: github.ref == 'refs/heads/main' && github.repository == 'finos/git-proxy'
         uses: docker/login-action@v3
         with:
           username: finos
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - name: Publish Docker Image
+      - name: Build and Publish Docker Image
         if: github.ref == 'refs/heads/main' && github.repository == 'finos/git-proxy'
-        shell: bash
-        run: |
-          docker push finos/git-proxy:latest
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          push: true
+          tags: finos/git-proxy:latest
+          provenance: true