refactor(ci): use ghcr

Author: trixter-osec

.github/workflows/publish.yaml

@@ -2,20 +2,29 @@ name: publish
 on:
   push:
     branches:
-      - master
+      - main
+
 jobs:
   publish:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
+
+    permissions:
+      packages: write
+      contents: read
+
     steps:
-      - uses: docker/[email protected]
-      - uses: docker/[email protected]
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ github.token }}
-      - uses: docker/build-push-action@v2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+
+      - name: Build
+        uses: docker/build-push-action@v6
         with:
           push: true
-          tags: ghcr.io/${{ github.repository }},ghcr.io/${{ github.repository }}:sha-${{ github.sha }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          tags: |
+            ghcr.io/otter-sec/rctf-admin-bot:${{ github.sha }}
+            ghcr.io/otter-sec/rctf-admin-bot:${{ github.ref_name }}
+          cache-from: type=registry,ref=ghcr.io/otter-sec/rctf-admin-bot:main
+          cache-to: type=inline