Merge pull request #84 from fangshun-z/fix/83 #37

	name: Release Image

	on:
	push:
	branches:
	- main

	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	build-and-push-image:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v3

	- name: Log in to ghcr
	uses: docker/login-action@v2
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Set up QEMU
	uses: docker/setup-qemu-action@v2

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v2

	- name: Extract metadata (tags, labels) for Docker
	id: meta
	uses: docker/metadata-action@v4
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	tags: \|
	type=sha,prefix={{branch}}-

	- uses: actions/setup-node@v3
	with:
	node-version: 16

	- name: Install dependencies
	run: npm ci

	- name: Run Build
	run: npm run build

	- name: Docker build and push
	uses: docker/build-push-action@v4
	with:
	context: .
	platforms: linux/amd64,linux/arm64
	push: true
	tags: ${{ steps.meta.outputs.tags }}
	build-args: \|
	NGINX_IMAGE_VERSION=${{ vars.NGINX_IMAGE_VERSION}}

	- name: Trivy check
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: "${{ steps.meta.outputs.tags }}"
	format: "table"
	exit-code: "1"
	ignore-unfixed: true
	vuln-type: "os,library"
	severity: "CRITICAL,HIGH"

Provide feedback