build: Replace separate hadolint, dockle and trivy by one workflow. (#…

…417)

.github/workflows/docker.yml

@@ -1,32 +1,12 @@
 ---
 name: Docker
-'on':
-  push:
-    tags:
-      - '*'
+'on': push
 jobs:
-  release:
-    runs-on: ubuntu-latest
+  docker:
+    runs-on: ubuntu-20.04
     steps:
-      - name: Set up QEMU
-        uses: docker/[email protected]
-      - name: Set up Docker Buildx
-        uses: docker/[email protected]
-      - name: Login to DockerHub
-        uses: docker/[email protected]
+      - uses: actions/[email protected]
+      - uses: schubergphilis/[email protected]
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: version
-        id: version
-        run: echo ::set-output name=version::${GITHUB_REF#refs/tags/}
-      - name: Build and push
-        id: docker_build
-        uses: docker/[email protected]
-        with:
-          push: true
-          tags: utrecht/n3dr:${{ steps.version.outputs.version }}
-          build-args: |
-            VERSION=${{ github.ref }}
-      - name: Image digest
-        run: echo ${{ steps.docker_build.outputs.digest }}
+          dockle-accept-key: libcrypto3,libssl3
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/dockerhub.yml

@@ -0,0 +1,32 @@
+---
+name: Dockerhub
+'on':
+  push:
+    tags:
+      - '*'
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up QEMU
+        uses: docker/[email protected]
+      - name: Set up Docker Buildx
+        uses: docker/[email protected]
+      - name: Login to DockerHub
+        uses: docker/[email protected]
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: version
+        id: version
+        run: echo ::set-output name=version::${GITHUB_REF#refs/tags/}
+      - name: Build and push
+        id: docker_build
+        uses: docker/[email protected]
+        with:
+          push: true
+          tags: utrecht/n3dr:${{ steps.version.outputs.version }}
+          build-args: |
+            VERSION=${{ github.ref }}
+      - name: Image digest
+        run: echo ${{ steps.docker_build.outputs.digest }}

Dockerfile

@@ -14,7 +14,7 @@ COPY --from=builder /etc/passwd /etc/passwd
 COPY --from=builder /n3dr /usr/local/bin/n3dr
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 RUN apk add --no-cache \
-        libcrypto3=3.1.4-r1 \
-        libssl3=3.1.4-r1
+        libcrypto3=~3 \
+        libssl3=~3
 USER n3dr
 ENTRYPOINT ["n3dr"]