build(deps): Update Go version to 1.25.4 - OB-50380 (#413) #17

	name: Release Image to ECR for Orca Scanning

	on:
	push:
	branches: ["main"]
	workflow_dispatch:

	jobs:
	push-orca-ecr:
	name: Push aws-sam-apps image to ECR
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	contents: write
	pull-requests: write
	security-events: write
	env:
	PROJECT_KEY: observeinc-aws-sam-apps
	IMAGE_NAME: aws-sam-apps-all-binaries
	VERSION: ${{ github.ref_name }}

	steps:
	- name: Checkout Repository
	uses: actions/checkout@v4

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3
	with:
	driver-opts: image=moby/buildkit:latest
	buildkitd-flags: --debug

	- name: Restore Docker cache
	if: always()
	uses: actions/cache@v4
	with:
	path: .buildx-cache
	key: ${{ runner.os }}-buildx-${{ github.ref }}-${{ github.sha }}
	restore-keys: \|
	${{ runner.os }}-buildx-${{ github.ref }}-
	${{ runner.os }}-buildx-

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: 1.25.4

	- name: Configure AWS Credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: ${{ secrets.AWS_ROLE_ARN_ENG }} #Use Eng OIDC trusted role
	role-session-name: ${{ github.sha }}
	aws-region: us-west-2

	- name: Log in to Amazon ECR
	uses: aws-actions/amazon-ecr-login@v2

	- name: Run push-to-ecr script
	run: \|
	chmod +x push-to-ecr.sh
	./push-to-ecr.sh

	- name: Save updated Docker cache
	if: always()
	uses: actions/cache@v4
	with:
	path: .buildx-cache
	key: ${{ runner.os }}-buildx-${{ github.ref }}-${{ github.sha }}

Provide feedback