ci: move towards fully reproduceable builds

[rjaegers]

See also https://github.com/moby/buildkit/blob/master/docs/build-repro.md

Pull Request

Description of changes

Checklist

• I have followed the contribution guidelines for this repository
• I have added tests for new behavior, and have not broken any existing tests
• I have added or updated relevant documentation
• I have verified that all added components are accounted for in the SBOM

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	14		0	0.04s
✅ DOCKERFILE	hadolint	2		0	0.42s
✅ JSON	prettier	11	0	0	1.01s
✅ JSON	v8r	10		0	4.67s
✅ MARKDOWN	markdownlint	8	0	0	1.13s
✅ MARKDOWN	markdown-table-formatter	8	0	0	0.28s
✅ REPOSITORY	checkov	yes		no	15.53s
✅ REPOSITORY	gitleaks	yes		no	0.38s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.67s
✅ REPOSITORY	secretlint	yes		no	1.51s
✅ REPOSITORY	trivy	yes		no	6.93s
✅ REPOSITORY	trivy-sbom	yes		no	2.87s
✅ REPOSITORY	trufflehog	yes		no	3.01s
✅ SPELL	lychee	48		0	0.85s
✅ YAML	prettier	19	0	0	1.31s
✅ YAML	v8r	19		0	12.36s
✅ YAML	yamllint	19		0	0.46s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

[github-actions]

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-rust:latest to ghcr.io/philips-software/amp-devcontainer-rust@sha256:a4c22787ecc5ce81bd4f34ddb18640304dd3c4cecae6b3fbb2581280f032e35c

OS/Platform	Previous Size	Current Size	Delta
linux/amd64	432.86M	432.86M	54.00 (+0.00%)
linux/arm64	572.09M	572.09M	-103.00 (-0.00%)

[github-actions]

Test Results

 2 files  ±0   2 suites  ±0   51s ⏱️ -1s
26 tests ±0  26 ✅ ±0  0 💤 ±0  0 ❌ ±0 
28 runs  ±0  28 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit bec804b. ± Comparison against base commit 90aa2d7.

♻️ This comment has been updated with latest results.

[github-actions]

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-cpp:latest to ghcr.io/philips-software/amp-devcontainer-cpp@sha256:0e13ed1f78cf67d892b160d0d62e1a8a634e82671236d6f749ddca81b0ead754

OS/Platform	Previous Size	Current Size	Delta
linux/amd64	640.27M	640.27M	-150.00 (-0.00%)
linux/arm64	632.60M	632.60M	238.00 (+0.00%)

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[rjaegers]

There is still this docker/metadata-action#403 that needs to be solved first.