docker-publish.yml contains references to actions that used deprecated commands

[bpow]

As a "starter template" and something suggested at the 1st page of the recommendations for a repo with a Dockerfile, I'm a bit surprised that docker-publish.yml uses actions/commands that are deprecated (for instance, set-output and save-state which are due to be removed within a few weeks of this report).

Relatedly, this template refers to a workaround which appears to have been addressed in docker-push-action over a year ago: docker/build-push-action#461

[bpow]

Noting that #2044 is related to this (by addressing one of the outdated versions in the workflow.

[JamesMGreene]

We've updated to the latest version of cosign:

• use intermediate environment variables to avoid risks of script injection #2048

Are there other actions in the workflow that are still producing deprecation warnings? If you could provide more specifics, that would be very helpful for getting it resolved more expediently. 🙇🏻 🙏🏻

[github-actions]

This issue has become stale and will be closed automatically within a period of time. Sorry about that.