FYI, I spent hours trying to identify failures on builds when attempting to upgrade all the actions versions. In your build step "Get image digest" where you echo out the digest of the built image, they changed this up starting in v2.10.0. You will need to imageid rather than digest to return the real digest. So it becomes steps.docker-build-push.outputs.imageid.

    - name: Get image digest
      id: digest
      run: echo "::set-output name=digest::$(docker inspect ${{ steps.docker-build-push.outputs.imageid }} | jq -r '.[].RepoDigests[0] | split("@") | .[1]')"

Add additionalExtensions as described in: kyverno/kyverno#3404