From 5d5a87df41ac6f355d3f43671b235df7ed142f38 Mon Sep 17 00:00:00 2001
From: James Newman <james.newman@dexory.com>
Date: Fri, 19 Apr 2024 10:28:12 +0200
Subject: [PATCH] TECH-149 Move SSH after ECR to retain credentials

Signed-off-by: James Newman <james.newman@dexory.com>
---
 .github/workflows/container-build.yml | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/container-build.yml b/.github/workflows/container-build.yml
index c6c71ff..695c82b 100644
--- a/.github/workflows/container-build.yml
+++ b/.github/workflows/container-build.yml
@@ -55,19 +55,6 @@ jobs:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: ${{ startsWith(github.ref, 'refs/pull/') }}
 
-    steps:
-      - name: Tailscale SSH debug (${{
-          inputs.ssh-debug
-            && (runner.debug && 'enabled' || 're-run with debug logging to enable')
-            || 'disabled'
-          }})
-
-        if: ${{ inputs.ssh-debug && runner.debug }}
-        uses: botsandus/github-actions/tailscale-ssh@master
-        with:
-          ssh-wait-minutes: ${{ inputs.ssh-wait-minutes }}
-          ts-authkey: ${{ secrets.TAILSCALE_CI_BUILDER_KEY }}
-
       - name: Expose GitHub Runtime
         uses: crazy-max/ghaction-github-runtime@v1
 
@@ -91,6 +78,19 @@ jobs:
         id: login-ecr
         uses: aws-actions/amazon-ecr-login@v1
 
+    steps:
+      - name: Tailscale SSH debug (${{
+          inputs.ssh-debug
+            && (runner.debug && 'enabled' || 're-run with debug logging to enable')
+            || 'disabled'
+          }})
+
+        if: ${{ inputs.ssh-debug && runner.debug }}
+        uses: botsandus/github-actions/tailscale-ssh@master
+        with:
+          ssh-wait-minutes: ${{ inputs.ssh-wait-minutes }}
+          ts-authkey: ${{ secrets.TAILSCALE_CI_BUILDER_KEY }}
+
       - name: Calculate tags
         id: tag-calculator
         run: |