mirror of
https://github.com/donaldzou/WGDashboard.git
synced 2024-11-06 16:00:28 +01:00
48 lines
1.3 KiB
YAML
48 lines
1.3 KiB
YAML
|
name: Docker Image Build and Analysis
|
||
|
|
|
||
|
|
on:
|
||
|
|
schedule:
|
||
|
|
- cron: "0 0 * * *" # Schedule the workflow to run daily at midnight (UTC time). Adjust the time if needed.
|
||
|
|
workflow_dispatch: # Manual run trigger
|
||
|
|
inputs:
|
||
|
|
trigger-build:
|
||
|
|
description: 'Trigger a manual build and push'
|
||
|
|
default: 'true'
|
||
|
|
|
||
|
|
jobs:
|
||
|
|
build-and-analyze:
|
||
|
|
runs-on: ubuntu-latest
|
||
|
|
|
||
|
|
steps:
|
||
|
|
- name: Checkout repository
|
||
|
|
uses: actions/checkout@v3
|
||
|
|
|
||
|
|
- name: Set up Docker Buildx
|
||
|
|
uses: docker/setup-buildx-action@v2
|
||
|
|
|
||
|
|
- name: Login to Docker Hub
|
||
|
|
uses: docker/login-action@v2
|
||
|
|
with:
|
||
|
|
username: ${{ secrets.DOCKER_USERNAME }}
|
||
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
||
|
|
|
||
|
|
- name: Build Docker image
|
||
|
|
id: build-image
|
||
|
|
run: |
|
||
|
|
docker build -t my-app-image:latest .
|
||
|
|
|
||
|
|
- name: Install Docker Scout
|
||
|
|
run: |
|
||
|
|
curl -fsSL https://get.docker.com/scout/install.sh | sh
|
||
|
|
|
||
|
|
- name: Analyze Docker image with Docker Scout
|
||
|
|
id: analyze-image
|
||
|
|
run: |
|
||
|
|
docker scout cves --format json my-app-image:latest > scout-results.json
|
||
|
|
|
||
|
|
- name: Upload Scout results
|
||
|
|
uses: actions/upload-artifact@v3
|
||
|
|
with:
|
||
|
|
name: scout-results
|
||
|
|
path: scout-results.json
|