Revert "Remove failing docker publish line"

.github/workflows/reusable_dockerfile_pipeline.yml

@@ -82,12 +82,12 @@ jobs:
           OUTPUT_IMAGE_NAME: ${{ needs.prepare-env.outputs.output_image_name }}
         with:
           # here we use the local tag that we've built before
-          image-ref: '${{ env.OUTPUT_IMAGE_NAME }}:${{ env.OUTPUT_SHORT_SHA }}'
-          format: 'table'
+          image-ref: "${{ env.OUTPUT_IMAGE_NAME }}:${{ env.OUTPUT_SHORT_SHA }}"
+          format: "table"
           #exit-code: '1' # uncomment to stop the CI if the scanner fails
           ignore-unfixed: true
-          vuln-type: 'os,library'
-          severity: 'CRITICAL,HIGH'
+          vuln-type: "os,library"
+          severity: "CRITICAL,HIGH"
 
   docker-build:
     runs-on: "ubuntu-latest"
@@ -134,9 +134,30 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v2
 
-      # We always build the image but we only push if we are on the `main`,
-      # `master` branch or a versioned `v*` branch
-      - name: Build and Push Docker Image (amd64 and arm64)
+      # On Pull Requests we want the ability to build and push images for
+      # testing purposes. The Github security model prevents forks from pushing
+      # to the registry so we can only push if the PR is not generated from a
+      # fork. Even though forks can't push, we still want to try and build the
+      # image to catch bugs. For testing purposes we only need an amd64 image.
+      - name: Build and Push Docker Image amd64 for Pull Requests
+        uses: docker/build-push-action@v4
+        if: ${{ github.event_name == pull_request }}
+        env:
+          OUTPUT_SHORT_SHA: ${{ needs.prepare-env.outputs.output_short_sha }}
+          OUTPUT_IMAGE_NAME: ${{ needs.prepare-env.outputs.output_image_name }}
+        with:
+          platforms: linux/amd64
+          # Only push if the head and base repos match, meaning it is not a fork
+          # yamllint disable
+          push: ${{ github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name }}
+          # yamllint enable
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          file: ${{ inputs.dockerfile }}
+
+      # On main, master, and versioned branches, we want to build and push the
+      # images.
+      - name: Build and Push Docker Images (amd64 and arm64)
         uses: docker/build-push-action@v4
         # yamllint disable
         # only run when the branch is main, master or starts with v*