fix(security): remediate workflow vulnerability in .github/workflows/build.yaml

Author: hf-security-analysis[bot]

.github/workflows/build.yaml

@@ -31,13 +31,11 @@ jobs:
         uses: actions/checkout@v6
 
       - id: set-matrix
-        env:
-          GITHUB_REF: ${{ github.ref }}
         run: |
-          branchName=$(echo $GITHUB_REF | sed 's,refs/heads/,,g')
+          branchName="${GITHUB_REF#refs/heads/}"
           matrix=$(jq --arg branchName "$branchName" 'map(. | select((.runOn==$branchName) or (.runOn=="always")) )' .github/workflows/matrix.json)
           echo "{\"include\":$(echo $matrix)}"
-          echo ::set-output name=matrix::{\"include\":$(echo $matrix)}\"
+          echo "matrix={\"include\":$(echo $matrix)}" >> $GITHUB_OUTPUT
 
   build-and-push-image:
     needs: matrix
@@ -180,4 +178,4 @@ jobs:
             actions_runtime_token=${{ env.ACTIONS_RUNTIME_TOKEN }}
           tags: ${{ steps.meta-grpc.outputs.tags }}
           labels: ${{ steps.meta-grpc.outputs.labels }}
-          cache-from: type=s3,region=us-east-1,bucket=${{ vars.AWS_S3BUCKET_GITHUB_BUILDX_CACHE }},name=text-embeddings-inference-cache-${{matrix.name}},access_key_id=${{ steps.aws-creds.outputs.aws-access-key-id }},secret_access_key=${{ steps.aws-creds.outputs.aws-secret-access-key }},session_token=${{ steps.aws-creds.outputs.aws-session-token }},mode=max
+          cache-from: type=s3,region=us-east-1,bucket=${{ vars.AWS_S3BUCKET_GITHUB_BUILDX_CACHE }},name=text-embeddings-inference-cache-${{matrix.name}},access_key_id=${{ steps.aws-creds.outputs.aws-access-key-id }},secret_access_key=${{ steps.aws-creds.outputs.aws-secret-access-key }},session_token=${{ steps.aws-creds.outputs.aws-session-token }},mode=max