Skip to content

Update plugin io.spring.dependency-management to v1.1.5 #50

Update plugin io.spring.dependency-management to v1.1.5

Update plugin io.spring.dependency-management to v1.1.5 #50

Workflow file for this run

name: Build Latest Image
on:
push:
branches:
- main
jobs:
build-image:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
with:
submodules: recursive
-
name: Set up QEMU
uses: docker/setup-qemu-action@v3
-
name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
-
name: Login to Quay.io Container Registry
uses: docker/login-action@v3
with:
registry: quay.io
username: ${{ secrets.QUAYIO_USERNAME }}
password: ${{ secrets.QUAYIO_TOKEN }}
-
name: Build Latest Version
uses: docker/build-push-action@v5
with:
context: .
file: ./Dockerfile
push: true
tags: |
quay.io/appuio/example-spring-boot:latest
-
name: Run vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'quay.io/appuio/example-spring-boot:latest'
format: 'table'
output: 'trivy-results.txt'
exit-code: '0'
ignore-unfixed: true
vuln-type: 'os'
severity: 'CRITICAL,HIGH'
-
name: Archive vulnerability scan results
uses: actions/upload-artifact@v4
with:
name: trivy-results-build
path: trivy-results.txt
-
uses: addnab/docker-run-action@v3
with:
image: 'quay.io/appuio/example-spring-boot:latest'
run: echo "hello world"