feat: 👷 Update Docker dependencies for Docker actions

[Anselmoo]

All PR-Submissions:

---

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open
  Pull Requests for the same
  update/change?

New ✨✨ Feature-Submissions:

---

• Does your submission pass tests?
• Have you lint your code locally prior to submission? Fixed: [Feature]: Update workflow of Container signing #1436
• This PR is for a new feature, not a bug fix.

Changes to ⚙️ Core-Features:

---

• Have you added an explanation of what your changes do and why you'd like
  us to include them?
• Have you written new tests for your core changes, as applicable?
• Have you successfully run tests with your changes locally?

Summary by Sourcery

This pull request updates the Docker dependencies and actions in the GitHub workflow for building and pushing Docker images. It includes revisions to the Docker build job, such as setting up QEMU, Docker Buildx, and logging into the GitHub Container Registry. Additionally, it adds steps for signing Docker images using Cosign with GitHub OIDC Token.

• CI:
  • Updated Docker dependencies and actions in the GitHub workflow for building and pushing Docker images.
  • Revised the Docker build job to include steps for setting up QEMU, Docker Buildx, and logging into the GitHub Container Registry.
  • Added steps for signing Docker images using Cosign with GitHub OIDC Token.

[semanticdiff-com]

Review changes with SemanticDiff.

[sourcery-ai]

Reviewer's Guide by Sourcery

This pull request updates the Docker dependencies and actions in the GitHub workflow file. The changes focus on updating the versions of various Docker-related actions, improving the build and push process, and enhancing the security of the image signing process.

File-Level Changes

Files	Changes
.github/workflows/docker-cd.yml	Updated Docker actions to newer versions, added QEMU setup, improved image build and push process, and enhanced image signing security.

---

Tips

• Trigger a new Sourcery review by commenting @sourcery-ai review on the pull request.
• Continue your discussion with Sourcery by replying directly to review comments.
• You can change your review settings at any time by accessing your dashboard:
  • Enable or disable the Sourcery-generated pull request summary or reviewer's guide;
  • Change the review language;
• You can always contact us if you have any questions or feedback.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sourcery-ai]

Hey @Anselmoo - I've reviewed your changes and they look great!

Here's what I looked at during the review

• 🟡 General issues: 1 issue found
• 🟡 Security: 1 issue found
• 🟢 Testing: all looks good
• 🟢 Complexity: all looks good
• 🟢 Documentation: all looks good

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment to tell me if it was helpful.}

[sourcery-ai]

🚨 suggestion (security): Consider the implications of always pushing images

The workflow now pushes images for all events, including PRs. This could potentially expose sensitive information or consume unnecessary resources. Consider adding a condition to push only for specific events or branches.

Suggested change

	push: true
	push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}

[sourcery-ai]

suggestion (performance): Re-evaluate the removal of build caching

The cache configuration has been removed from the build step. This could potentially slow down builds significantly. Consider re-implementing caching to improve build performance.

Suggested change

	uses: docker/[email protected]
	uses: docker/[email protected]
	with:
	cache-from: type=gha
	cache-to: type=gha,mode=max

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (48b394a) to head (ee91807).

Additional details and impacted files

@@            Coverage Diff            @@
##              main     #1437   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           44        44           
  Lines         4467      4467           
=========================================
  Hits          4467      4467           

Flag	Coverage Δ
unittests	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.