build(deps): bump distroless/base-debian12 from `5baa38c` to `20bc102… #767

	name: Docker Main
	permissions:
	contents: read
	on:
	push:
	branches:
	- main

	jobs:
	publish:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
	with:
	fetch-depth: 0

	- name: Setup Go
	uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
	with:
	go-version: 1.24.x

	- name: Docker meta
	id: meta
	uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804
	with:
	# list of Docker images to use as base name for tags
	images: \|
	pomerium/ingress-controller
	docker.cloudsmith.io/pomerium/ingress-controller/ingress-controller
	# generate Docker tags based on the following events/attributes
	tags: \|
	type=ref,event=branch
	type=sha

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2

	- name: Login to DockerHub
	uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772
	with:
	username: ${{ secrets.DOCKERHUB_USER }}
	password: ${{ secrets.DOCKERHUB_TOKEN }}

	- name: Log in to cloudsmith registry
	uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772
	with:
	registry: docker.cloudsmith.io
	username: ${{ secrets.CLOUDSMITH_USER }}
	password: ${{ secrets.CLOUDSMITH_API_KEY }}

	- name: Build
	run: make build-ci

	- name: Docker Publish - Main
	uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83
	with:
	context: .
	file: ./Dockerfile.ci
	push: true
	platforms: linux/amd64,linux/arm64
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}

Provide feedback