The goal is to use GHCR to replace Google Container Registry (GCR) for
future versions of Scorecard Action releases. These workflows will build
two types of images:

  1. Release images, which are tagged following a v1.2.3 pattern. These
  container images will be retained indefinitely.
  2. Per-commit images for each push to main. These images are used when
     testing the action, and will be removed after a week.

Signed-off-by: Spencer Schrock <sschrock@google.com>

spencerschrock added a commit to spencerschrock/scorecard-webapp that referenced this pull request

With the switch to GHCR we'll need to support both images for e2e testing.
Eventually we can remove the gcr.io case if needed.

ossf/scorecard-action#1453

Signed-off-by: Spencer Schrock <sschrock@google.com>

spencerschrock added a commit to ossf/scorecard-webapp that referenced this pull request

With the switch to GHCR we'll need to support both images for e2e testing.
Eventually we can remove the gcr.io case if needed.

ossf/scorecard-action#1453

Signed-off-by: Spencer Schrock <sschrock@google.com>

spencerschrock added a commit to ossf-tests/scorecard-action that referenced this pull request

ossf#1453
Signed-off-by: Spencer Schrock <sschrock@google.com>

spencerschrock added a commit to ossf-tests/scorecard-action that referenced this pull request

ossf#1453

Signed-off-by: Spencer Schrock <sschrock@google.com>