S3 backend #2

	name: build and test

	on:
	pull_request:
	branches:
	- "master"

	env:
	AWS_REGION: ap-southeast-2
	TAG_PREFIX: test

	permissions:
	id-token: write # This is required for requesting the JWT
	contents: read # This is required for actions/checkout

	jobs:
	build_test_push:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: set tag
	run: \|
	BRANCH_NAME=${{ github.head_ref \|\| github.ref_name }}
	echo TAG=${{ env.TAG_PREFIX}}-${BRANCH_NAME/\//_} >> $GITHUB_ENV

	- name: Set up docker structure test
	run: >
	curl -LO
	https://storage.googleapis.com/container-structure-test/latest/container-structure-test-linux-amd64
	&& chmod +x container-structure-test-linux-amd64 && sudo mv container-structure-test-linux-amd64
	/usr/local/bin/container-structure-test

	- name: Configure AWS Credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	audience: sts.amazonaws.com
	aws-region: ${{ env.AWS_REGION }}
	role-to-assume: ${{ secrets.AWS_ROLE_ARN }}

	- name: Login to ECR
	uses: docker/login-action@v3
	with:
	registry: ${{ vars.ECR_REGISTRY }}

	- name: Build
	uses: docker/build-push-action@v5
	with:
	context: .
	load: true
	tags: ${{ env.TAG }}

	- name: Test
	run: \|
	container-structure-test test --image ${{ env.TAG }} --config tests/config.yaml

	- name: Build and push
	uses: docker/build-push-action@v5
	with:
	context: .
	platforms: linux/amd64,linux/arm64
	push: true
	tags: ${{ vars.ECR_REGISTRY }}/${{ vars.ECR_REPOSITORY }}:${{ env.TAG }}

Provide feedback