Skip to content

Update actions/checkout digest to 44c2b7a #62

Update actions/checkout digest to 44c2b7a

Update actions/checkout digest to 44c2b7a #62

Workflow file for this run

name: Build Image
on:
pull_request:
jobs:
build-image:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
with:
submodules: recursive
-
name: Set up QEMU
uses: docker/setup-qemu-action@v3
-
name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
-
name: Login to Quay.io Container Registry
uses: docker/login-action@v3
with:
registry: quay.io
username: ${{ secrets.QUAYIO_USERNAME }}
password: ${{ secrets.QUAYIO_TOKEN }}
-
name: Build Latest Version
uses: docker/build-push-action@v5
with:
context: .
file: ./Dockerfile
push: true
tags: |
quay.io/appuio/example-spring-boot:pr-${{ github.event.pull_request.number }}
-
name: Run vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'quay.io/appuio/example-spring-boot:pr-${{ github.event.pull_request.number }}'
format: 'table'
output: 'trivy-results.txt'
exit-code: '0'
ignore-unfixed: true
vuln-type: 'os'
severity: 'CRITICAL,HIGH'
-
name: Archive vulnerability scan results
uses: actions/upload-artifact@v4
with:
name: trivy-results-build
path: trivy-results.txt
-
uses: addnab/docker-run-action@v3
with:
image: 'quay.io/appuio/example-spring-boot:pr-${{ github.event.pull_request.number }}'
run: echo "hello world"