Skip to content

chore(deps): update docker/build-push-action action to v6 #28

chore(deps): update docker/build-push-action action to v6

chore(deps): update docker/build-push-action action to v6 #28

Workflow file for this run

name: ci
on: pull_request
jobs:
Lint:
name: Lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: hadolint
uses: reviewdog/action-hadolint@v1
with:
github_token: ${{ secrets.github_token }}
reporter: github-pr-review
Build:
name: Build
runs-on: ubuntu-latest
needs: Lint
steps:
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
- name: Login to DockerHub
uses: docker/login-action@v2
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Build and push
id: docker_build
uses: docker/build-push-action@v6
with:
push: true
tags: jhonn/debug:latest
- name: Image digest
run: echo ${{ steps.docker_build.outputs.digest }}
Scan:
name: Scan
runs-on: ubuntu-latest
needs: Build
steps:
- uses: actions/checkout@v3
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'jhonn/debug:latest'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'