Fix scan for build

This commit is contained in:
Xiaonan Shen 2020-11-19 23:41:21 -08:00
parent cf8ab9b10d
commit dcde0c07a3
No known key found for this signature in database
GPG Key ID: 211BF560D12417F5

View File

@ -20,6 +20,11 @@ env:
jobs:
build:
runs-on: ubuntu-latest
services:
registry:
image: registry:2
ports:
- 5000:5000
steps:
- name: Checkout
uses: actions/checkout@master
@ -38,18 +43,19 @@ jobs:
uses: docker/setup-qemu-action@v1
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1
- uses: docker/build-push-action@v2
- name: Build image without push to DockerHub
uses: docker/build-push-action@v2
with:
context: ./build
file: ./build/Dockerfile
platforms: linux/amd64,linux/arm64/v8,linux/arm/v7
load: true
labels: protonmail-bridge:latest
push: true
labels: localhost:5000/protonmail-bridge:latest
- name: Scan image
id: scan
uses: anchore/scan-action@v2
with:
image: protonmail-bridge:latest
image: localhost:5000/protonmail-bridge:latest
fail-build: true
severity-cutoff: critical
acs-report-enable: true
@ -63,7 +69,8 @@ jobs:
with:
username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_PASSWORD }}
- uses: docker/build-push-action@v2
- name: Push image
uses: docker/build-push-action@v2
with:
context: ./build
file: ./build/Dockerfile