From 53c9ca10a7af48807a124f79bea119906307ef70 Mon Sep 17 00:00:00 2001
From: Noxcis <shamarakeillee@gmail.com>
Date: Sat, 24 Aug 2024 02:04:46 -0500
Subject: [PATCH] Update main.yml

---
 .github/workflows/main.yml | 35 ++++++++++++++---------------------
 1 file changed, 14 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 600c2ea..7e812e6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -17,34 +17,27 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v3
 
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
       - name: Log in to Docker Hub
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Build Docker image
+      - name: Build multiarch Docker image
         id: build-image
         run: |
-          docker build -t my-app-image:latest .
+          docker buildx create --use
+          docker buildx build --platform linux/amd64,linux/arm64,linux/arm/v7 -t wg-dashboard:latest --push .
 
-      - name: Install Docker Scout
-        run: |
-          curl -sSfL https://raw.githubusercontent.com/docker/scout-cli/main/install.sh | sh -s --
-
-      - name: Analyze Docker image with Docker Scout
-        id: analyze-image
-        run: |
-          # Get the current date in YYYY-MM-DD format
-          DATE=$(date +'%Y-%m-%d')
-          OUTPUT_FILE=".github/workflows/cve-report-$DATE.json"
-          
-          docker scout cves my-app-image:latest > $OUTPUT_FILE
-          echo "CVE report saved to $OUTPUT_FILE"
-          cat $OUTPUT_FILE
-
-      - name: Upload Scout results
-        uses: actions/upload-artifact@v3
+      - name: Docker Scout
+        id: docker-scout
+        uses: docker/scout-action@v1
         with:
-          name: scout-results
-          path: .github/workflows/cve-report-*.json
+          command: scan
+          image: wg-dashboard:latest
+          ignore-unchanged: true
+          only-severities: critical,high
+          github-token: ${{ secrets.GITHUB_TOKEN }}