🌱 Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 #210

	name: Docker Image Scan

	on:
	pull_request:
	branches: [ main ]

	jobs:
	scan:
	name: Build and Scan
	runs-on: ubuntu-latest
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	steps:
	- name: Notify on failure
	if: failure()
	uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
	with:
	script: \|
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: '❌ Container security scan failed. Please check the workflow logs.'
	})

	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0

	- name: Build local container
	uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d # v6.12.0
	with:
	tags: localbuild/testimage:latest
	push: false
	load: true

	- name: Scan image
	uses: anchore/scan-action@abae793926ec39a78ab18002bc7fc45bbbd94342 # v6.0.0
	with:
	image: "localbuild/testimage:latest"
	fail-build: true
	severity-cutoff: high

Provide feedback