feat: deduplicate build

Author: smlx

.github/workflows/build.yaml

@@ -8,13 +8,7 @@ jobs:
   build-snapshot:
     permissions:
       contents: read
-      packages: write
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        binary:
-        - go-cli-github
-        - another-binary
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
@@ -27,6 +21,29 @@ jobs:
       with:
         version: latest
         args: build --clean --verbose --single-target --snapshot
+    - name: tar up binaries
+      run: tar -cvf dist.tar dist
+    - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      with:
+        path: dist.tar
+  build-image:
+    permissions:
+      contents: read
+      packages: write
+    runs-on: ubuntu-latest
+    needs: build-snapshot
+    strategy:
+      matrix:
+        binary:
+        - go-cli-github
+        - another-binary
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+    - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+    - name: untar binaries
+      run: tar -xvf artifact/dist.tar
     - name: Login to GHCR
       if: github.actor != 'dependabot[bot]'
       uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0