Skip to content

Bump ghcr.io/devcontainers/features/docker-in-docker from 2.10.2 to 2.11.0 #30

Bump ghcr.io/devcontainers/features/docker-in-docker from 2.10.2 to 2.11.0

Bump ghcr.io/devcontainers/features/docker-in-docker from 2.10.2 to 2.11.0 #30

Workflow file for this run

---
name: Scan Image
on:
pull_request:
branches:
- main
permissions: {}
jobs:
scan-image:
name: Scan Image
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- name: Checkout
id: checkout
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- name: Build Image
id: build_image
uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
with:
push: false
load: true
tags: analytical-platform-rshiny-open-source-base
- name: Scan Image
id: scan_image
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.20.0
with:
image-ref: analytical-platform-rshiny-open-source-base
exit-code: 1
format: sarif
output: trivy-results.sarif
severity: CRITICAL
limit-severities-for-sarif: true
- name: Upload SARIF
if: always()
id: upload_sarif
uses: github/codeql-action/upload-sarif@ccf74c947955fd1cf117aef6a0e4e66191ef6f61 # v3.25.4
with:
sarif_file: trivy-results.sarif
- name: Scan Image (On SARIF Scan Failure)
if: failure() && steps.scan_image.outcome == 'failure'
id: scan_image_on_failure
uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # v0.20.0
with:
image-ref: analytical-platform-rshiny-open-source-base
exit-code: 1
format: table
severity: CRITICAL