feat: add github ci to publish container (testrun) #10

	---
	name: Security Scanning 🕵️

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	jobs:
	build_test_container:
	name: 'Build test container'
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Build local container
	uses: docker/build-push-action@v6
	with:
	tags: 'ci/test:latest'
	push: false

	- name: Scan image with Anchore Grype
	uses: anchore/scan-action@v4
	id: scan
	with:
	image: 'ci/test:latest'
	fail-build: false

	- name: Inspect action SARIF report
	run: jq . ${{ steps.scan.outputs.sarif }}

	- name: Upload Anchore scan SARIF report
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: ${{ steps.scan.outputs.sarif }}

Provide feedback