chore: add NEXT_PUBLIC_SECURE_SITE_SDK_URL to CSP (#2791) #381

	name: Publish Canary Image
	on:
	workflow_dispatch:
	push:
	branches:
	- main

	concurrency: ${{ github.workflow }}

	env:
	TERM: linux

	jobs:
	push:
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	steps:
	- name: Configure AWS Credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: ${{ secrets.AWS_ROLE_ECR_DEPLOYER }}
	aws-region: ${{ vars.AWS_REGION }}

	- name: Login to Amazon ECR
	id: login-ecr
	uses: aws-actions/amazon-ecr-login@v2
	with:
	mask-password: 'true'

	- name: Checkout
	uses: actions/checkout@v4

	- uses: pnpm/action-setup@v4
	name: Install pnpm

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Cache Docker layers
	uses: actions/cache@v4
	with:
	path: /tmp/.buildx-cache
	key: ${{ runner.os }}-buildx-${{ github.sha }}
	restore-keys: \|
	${{ runner.os }}-buildx-

	- name: Build, tag, and push image to Amazon ECR
	uses: docker/build-push-action@v5
	env:
	ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
	ECR_REPOSITORY: web3modal-canary
	IMAGE_TAG: V4
	with:
	context: .
	file: Dockerfile.canary
	push: true
	tags: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}
	cache-from: type=local,src=/tmp/.buildx-cache
	cache-to: type=local,dest=/tmp/.buildx-cache-new

	# Temp fix
	# https://github.com/docker/build-push-action/issues/252
	# https://github.com/moby/buildkit/issues/1896
	- name: Move cache
	run: \|
	rm -rf /tmp/.buildx-cache
	mv /tmp/.buildx-cache-new /tmp/.buildx-cache

Provide feedback