Merge pull request #6523 from fuweid/fix-6484

fix: .dockerignore make git working tree dirty

.dockerignore

@@ -1,4 +0,0 @@
-.github/
-.dockerignore
-releases/
-bin/

.github/workflows/release/Dockerfile

@@ -50,5 +50,10 @@ RUN \
 	make release cri-release cri-cni-release && \
 	for f in $(find bin -executable -type f); do xx-verify $f; done
 
+# check git working tree after build
+RUN \
+	export GIT_STATUS_OUTPUT=$(git status --porcelain) && \
+	test -z $GIT_STATUS_OUTPUT || (echo $GIT_STATUS_OUTPUT && exit 1)
+
 FROM scratch AS release
 COPY --from=target /go/src/github.com/containerd/containerd/releases/ /