chore: refactor GitHub Actions workflow to streamline ACR login and update Docker login actions

Author: incubator4

.github/workflows/build.yaml

@@ -7,6 +7,7 @@ on:
 
 env:
   GIT_COMMIT: ${{ github.sha }}
+  ACR_INSTANCE_ID: cri-0jrfa7tkgiwjzabf
 
 permissions:
   contents: read
@@ -44,36 +45,12 @@ jobs:
         with:
           platforms: all
 
-      - uses: aliyun/configure-aliyun-credentials-action@v1
-        id: aliyun-auth
-        with:
-          role-to-assume: "acs:ram::5621254376179407:role/docker"
-          oidc-provider-arn: "acs:ram::5621254376179407:oidc-provider/github"
-          role-session-name: "github-action-session"
-          role-session-expiration: 1800
-          audience: "sts.aliyuncs.com"
-
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to ghcr
-        uses: docker/login-action@v2
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ github.token }}
-
-      - name: Login to ACR
-        id: login-acr
-        uses: aliyun/acr-login@v2.0.1
-        with:
-          login-server: https://container-registry.us-east-1.cr.aliyuncs.com
-          region-id: "us-east-1"
-          instance-id: cri-0jrfa7tkgiwjzabf
-
       - name: Build and push
         uses: docker/bake-action@v5
         with:
@@ -118,25 +95,39 @@ jobs:
           audience: "sts.aliyuncs.com"
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to ghcr
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
+      - name: setup aliyun cli
+        uses: aliyun/setup-aliyun-cli-action@v1
+
+      - name: get acr credential
+        id: acr-cred
+        run: |
+          RESPONSE=$(aliyun cr GetAuthorizationToken --region us-east-1 --InstanceId ${{ env.ACR_INSTANCE_ID }})
+          TEMP_USERNAME=$(echo "$RESPONSE" | jq -r '.TempUsername')
+          AUTH_TOKEN=$(echo "$RESPONSE" | jq -r '.AuthorizationToken')
+
+          echo "::add-mask::$AUTH_TOKEN"
+
+          echo "username=$TEMP_USERNAME" >> $GITHUB_OUTPUT
+          echo "password=$AUTH_TOKEN" >> $GITHUB_OUTPUT
+
       - name: Login to ACR
-        id: login-acr
-        uses: aliyun/acr-login@v2.0.1
+        uses: docker/login-action@v3
         with:
-          login-server: https://container-registry.us-east-1.cr.aliyuncs.com
-          region-id: "us-east-1"
-          instance-id: cri-0jrfa7tkgiwjzabf
+          registry: container-registry.us-east-1.cr.aliyuncs.com
+          username: ${{ steps.acr-cred.outputs.username }}
+          password: ${{ steps.acr-cred.outputs.password }}
 
       - name: Build and push
         uses: docker/bake-action@v5