ci: test bake reusable workflow

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>

Author: dvdksn

.github/workflows/build.yml

@@ -38,24 +38,20 @@ jobs:
           targets: releaser-build
 
   build:
+    uses: docker/github-builder-experimental/.github/workflows/bake.yml@main
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    with:
+      output: local
+      target: release
+
+  check-cloudfront:
     runs-on: ubuntu-24.04
     needs:
       - releaser
     steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v5
-      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      -
-        name: Build
-        uses: docker/bake-action@v6
-        with:
-          source: .
-          files: |
-            docker-bake.hcl
-          targets: release
       -
         name: Check Cloudfront config
         uses: docker/bake-action@v6
@@ -69,7 +65,11 @@ jobs:
           AWS_LAMBDA_FUNCTION: DockerDocsRedirectFunction-dummy
 
   validate:
-    runs-on: ubuntu-24.04
+    uses: docker/github-builder-experimental/.github/workflows/bake.yml@main
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -82,29 +82,28 @@ jobs:
           - dockerfile-lint
           - path-warnings
           - validate-vendor
+    with:
+      output: local
+      target: ${{ matrix.target }}
+      artifact-name: ${{ matrix.target }}
+
+  reviewdog:
+    runs-on: ubuntu-24.04
+    needs: validate
+    if: ${{ github.event_name == 'pull_request' }}
     steps:
       -
-        name: Checkout
-        uses: actions/checkout@v5
-      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      -
-        name: Validate
-        uses: docker/bake-action@v6
+        name: Download vale output
+        uses: actions/download-artifact@v4
         with:
-          source: .
-          files: |
-            docker-bake.hcl
-          targets: ${{ matrix.target }}
+          name: vale
+          path: ./vale-output
       -
         name: Install reviewdog
-        if: ${{ matrix.target == 'vale' && github.event_name == 'pull_request' }}
         uses: reviewdog/action-setup@d8a7baabd7f3e8544ee4dbde3ee41d0011c3a93f # v1.5.0
       -
         name: Run reviewdog for vale
-        if: ${{ matrix.target == 'vale' && github.event_name == 'pull_request' }}
         run: |
-          cat ./tmp/vale.out | reviewdog -f=rdjsonl -name=vale -reporter=github-pr-annotations -fail-on-error=false -filter-mode=added -level=info -fail-level=warning
+          cat ./vale-output/vale.out | reviewdog -f=rdjsonl -name=vale -reporter=github-pr-annotations -fail-on-error=false -filter-mode=added -level=info -fail-level=warning
         env:
           REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Dockerfile

@@ -44,6 +44,7 @@ COPY . .
 
 # build creates production builds with Hugo
 FROM build-base AS build
+ARG BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
 # HUGO_ENV sets the hugo.Environment (production, development, preview)
 ARG HUGO_ENV="development"
 # DOCS_URL sets the base URL for the site
@@ -123,6 +124,7 @@ EOT
 
 # build-upstream builds an upstream project with a replacement module
 FROM build-base AS build-upstream
+ARG BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
 # UPSTREAM_MODULE_NAME is the canonical upstream repository name and namespace (e.g. moby/buildkit)
 ARG UPSTREAM_MODULE_NAME
 # UPSTREAM_REPO is the repository of the project to validate (e.g. dvdksn/buildkit)
@@ -148,6 +150,7 @@ RUN --mount=type=bind,target=. ./hack/test/unused_media
 
 # path-warnings checks for duplicate target paths
 FROM build-base AS path-warnings
+ARG BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
 RUN hugo --printPathWarnings > ./path-warnings.txt
 RUN <<EOT
 DUPLICATE_TARGETS=$(grep "Duplicate target paths" ./path-warnings.txt)