Update registry.access.redhat.com/ubi9/ubi-minimal Docker tag to v9.3… #20

	name: Build kyverno-cli

	on:
	push:
	paths:
	- .github/workflows/kyverno-cli-build.yaml
	- kyverno-cli/**

	jobs:
	build:
	env:
	context: kyverno-cli
	image_name: kyverno-cli
	branch_name: ${{ github.head_ref \|\| github.ref_name }}
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

	- name: Get image tags
	id: image_tags
	run: \|
	echo -n ::set-output name=IMAGE_TAGS::

	TAGS=('latest')
	TAGS+=($(grep "LABEL version" kyverno-cli/Dockerfile_build \| cut -d '"' -f 2))
	echo "${TAGS[*]}"

	- uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
	with:
	dockerfile: kyverno-cli/Dockerfile_build
	ignore: DL3041 # https://github.com/hadolint/hadolint/wiki/DL3041

	- name: Build image
	id: build_image
	uses: redhat-actions/buildah-build@b4dc19b4ba891854660ab1f88a097d45aa158f76 # v2
	with:
	context: ${{ env.context }}
	dockerfiles: \|
	./${{ env.context }}/Dockerfile_build
	image: ${{ env.image_name }}
	oci: true
	tags: "${{ steps.image_tags.outputs.IMAGE_TAGS }}"

	- name: Push to ghcr.io
	if: ${{ env.branch_name == 'master' }} # Stops push running when dependabot creates a PR, which fails due to token
	uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
	with:
	image: ${{ steps.build_image.outputs.image }}
	registry: ghcr.io/${{ github.repository }}
	username: ${{ github.repository_owner }}
	password: ${{ secrets.GITHUB_TOKEN }}
	tags: ${{ steps.build_image.outputs.tags }}

Provide feedback