Skip to content

Update docker/build-push-action action to v6 #56

Update docker/build-push-action action to v6

Update docker/build-push-action action to v6 #56

Workflow file for this run

---
name: Lint & Test
# Run for all pushes to main and pull requests when Go or YAML files change
on:
push:
branches:
- main
pull_request:
workflow_dispatch:
jobs:
lint:
name: lint
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v3
- name: Run check
run: FC_OUT=/tmp/krakend.yml make check
build-image:
name: build-image
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Verify krakend configuration
run: FC_OUT=/tmp/krakend.yml make check
- name: docker-metadata
id: docker-metadata
uses: docker/metadata-action@v4
with:
images: ghcr.io/${{ github.repository_owner }}/api-gateway
tags: |
type=sha
- name: Build
uses: docker/build-push-action@v6
with:
context: .
file: ./Dockerfile
push: false
load: true
tags: ${{ steps.docker-metadata.outputs.tags }}
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: ${{ steps.docker-metadata.outputs.tags }}
security-checks: 'vuln,config,secret'
ignore-unfixed: true
severity: 'HIGH,CRITICAL'
format: 'table'