ci: do not build signed image withg buildx #4

	name: Build and publish signed Docker image

	on:
	workflow_dispatch:
	push:
	branches:
	- main

	jobs:
	multiarch-build:
	name: Build and publish signed image
	runs-on: ubuntu-latest

	env:
	IMAGE_NAME: nginxproxy/${{ github.event.repository.name }}
	IMAGE_TAG: signed

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Load DCT delegation key
	env:
	DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE: ${{ secrets.DCT_KEY_PASSPHRASE }}
	DCT_KEY_BASE64: ${{ secrets.DCT_KEY_BASE64 }}
	run: \|
	echo "$DCT_KEY_BASE64" \| base64 -d > delegation.key
	chmod 600 delegation.key
	docker trust key load delegation.key --name gha
	rm delegation.key

	- name: Login to DockerHub
	uses: docker/login-action@v3
	with:
	username: ${{ secrets.DOCKERHUB_USERNAME }}
	password: ${{ secrets.DOCKERHUB_TOKEN }}

	- name: Build the image
	run: docker build -t ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }} .

	- name: Push and sign the image
	env:
	DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE: ${{ secrets.DCT_KEY_PASSPHRASE }}
	run: \|
	docker trust sign ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}

	- name: Verify the image signature
	run: \|
	docker trust inspect --pretty ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}

Provide feedback