🌱 Bump the github-actions group across 1 directory with 4 updates #211

	name: Docker Image Scan

	on:
	pull_request:
	branches: [ main ]

	jobs:
	scan:
	name: Build and Scan
	runs-on: ubuntu-latest
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	steps:
	- name: Notify on failure
	if: failure()
	uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
	with:
	script: \|
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: '❌ Container security scan failed. Please check the workflow logs.'
	})

	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0

	- name: Build local container
	uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0
	with:
	tags: localbuild/testimage:latest
	push: false
	load: true

	- name: Scan image
	uses: anchore/scan-action@7c05671ae9be166aeb155bad2d7df9121823df32 # v6.1.0
	with:
	image: "localbuild/testimage:latest"
	fail-build: true
	severity-cutoff: high

Provide feedback