Merge pull request #8541 from kaovilai/CVEs #2063

	name: Main CI

	on:
	push:
	branches:
	- 'main'
	- 'release-**'
	tags:
	- '*'

	jobs:

	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- name: Check out the code
	uses: actions/checkout@v4
	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: 'go.mod'
	- id: 'auth'
	uses: google-github-actions/auth@v2
	with:
	credentials_json: '${{ secrets.GCS_SA_KEY }}'
	- name: 'set up GCloud SDK'
	uses: google-github-actions/setup-gcloud@v2
	- name: 'use gcloud CLI'
	run: \|
	gcloud info
	- name: Set up QEMU
	id: qemu
	uses: docker/setup-qemu-action@v3
	with:
	platforms: all
	- name: Set up Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@v3
	with:
	version: latest
	- name: Build
	run: \|
	make local
	# Clean go cache to ease the build environment storage pressure.
	go clean -modcache -cache
	- name: Test
	run: make test
	- name: Upload test coverage
	uses: codecov/codecov-action@v5
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	files: coverage.out
	verbose: true
	# Use the JSON key in secret to login gcr.io
	- uses: 'docker/login-action@v3'
	with:
	registry: 'gcr.io' # or REGION.docker.pkg.dev
	username: '_json_key'
	password: '${{ secrets.GCR_SA_KEY }}'
	# Only try to publish the container image from the root repo; forks don't have permission to do so and will always get failures.
	- name: Publish container image
	if: github.repository == 'vmware-tanzu/velero'
	run: \|
	sudo swapoff -a
	sudo rm -f /mnt/swapfile
	docker system prune -a --force

	# Build and push Velero image to docker registry
	docker login -u ${{ secrets.DOCKER_USER }} -p ${{ secrets.DOCKER_PASSWORD }}
	./hack/docker-push.sh

Provide feedback