Bump all actions and remove deploy key

Also move from ghcr to GAR

Author: christeredvartsen

.github/workflows/test-and-deploy.yml

@@ -1,7 +1,8 @@
 name: Test, build and deploy
 on: push
-env:
-  IMAGE: ghcr.io/${{ github.repository }}:${{ github.sha }}
+permissions:
+  contents: read
+  id-token: write
 jobs:
   test:
     name: Run unit tests and static analysis
@@ -44,25 +45,27 @@ jobs:
         run: vendor/bin/phpunit
 
       - name: Run static analysis
-        run: vendor/bin/psalm --no-cache --show-info=true
+        run: vendor/bin/phpstan
 
       - name: Check coding standard
         run: php-cs-fixer fix --dry-run --diff
 
   build-push:
-    name: Build and push docker container
+    name: Build and push image
     runs-on: ubuntu-24.04
     needs: test
+    outputs:
+      image: ${{ steps.docker-build-push.outputs.image }}
+      telemetry: ${{ steps.docker-build-push.outputs.telemetry }}
     steps:
       - uses: actions/checkout@v4
 
-      - name: Build and publish Docker image
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          docker build --tag ${IMAGE} .
-          docker login ghcr.io -u ${GITHUB_REPOSITORY} -p ${GITHUB_TOKEN}
-          docker push ${IMAGE}
+      - uses: nais/docker-build-push@v0
+        id: docker-build-push
+        with:
+          team: naisdevice
+          identity_provider: ${{ secrets.NAIS_WORKLOAD_IDENTITY_PROVIDER }}
+          project_id: ${{ vars.NAIS_MANAGEMENT_PROJECT_ID }}
 
   deploy-dev-gcp:
     name: Deploy to dev-gcp
@@ -78,6 +81,8 @@ jobs:
           CLUSTER: dev-gcp
           RESOURCE: .nais/nais.yml
           VARS: .nais/dev-gcp-vars.json
+          VAR: image=${{ needs.build-push.outputs.image }}
+          TELEMETRY: ${{ needs.build-push.outputs.telemetry }}
 
   deploy-prod-gcp:
     if: ${{ github.ref == 'refs/heads/main' }}
@@ -94,3 +99,5 @@ jobs:
           CLUSTER: prod-gcp
           RESOURCE: .nais/nais.yml
           VARS: .nais/prod-gcp-vars.json
+          VAR: image=${{ needs.build-push.outputs.image }}
+          TELEMETRY: ${{ needs.build-push.outputs.telemetry }}