docker-test.yml

#
# Copyright © 2021 Bedag Informatik AG
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#  This is a basic workflow to help you get started with Actions
#
name: docker-test
on:
  pull_request:
jobs:
  build-test:
    if: ${{ github.event.issue.pull_request }} && ! contains(github.event.head_commit.message, 'ci skip')
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: image-build-action
        uses: bedag/image-build-action@main
      - name: Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@master
        with:
          image-ref: bedag/squid
          format: 'table'
          output: 'trivy'
          severity: 'CRITICAL,HIGH'
      # - name: Read package.json
      #   id: scan
      #   uses: juliangruber/read-file-action@v1
      #   with:
      #     path: ./trivy
      # - name: comment PR
      #   uses: unsplash/comment-on-pr@master
      #   env:
      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      #   with:
      #     msg: ${{ steps.scan.output.content }}
      #     check_for_duplicate_msg: false  # OPTIONAL