Check volume requirement on all containers. #128

	name: CI PRs

	on:
	pull_request:

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	# cache maven repo
	- uses: actions/cache@v3
	with:
	path: ~/.m2/repository
	key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
	restore-keys: \|
	${{ runner.os }}-m2-
	# jdk8
	- uses: actions/setup-java@v3
	with:
	java-version: '8'
	distribution: 'liberica'
	- uses: jvalkeal/setup-maven@v1
	with:
	maven-version: 3.8.8
	maven-mirror: 'https://dlcdn.apache.org/maven/maven-3/'
	# build
	- name: Build
	run: \|
	mvn -U -B clean package -T 0.5C
	- name: Capture Test Results
	if: failure()
	uses: actions/upload-artifact@v3
	with:
	name: test-results
	path: '/build/reports/tests//.*'
	retention-days: 3
	# clean m2 cache
	- name: Clean cache
	run: \|
	find ~/.m2/repository -type d -name '*SNAPSHOT' \| xargs rm -fr
	- name: 'Built'
	shell: bash
	run: echo "::info ::Built"
	scan:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Run Trivy vulnerability scanner in repo mode
	uses: aquasecurity/trivy-action@master
	with:
	scan-type: 'fs'
	ignore-unfixed: true
	format: 'sarif'
	output: 'trivy-results.sarif'
	severity: 'CRITICAL,HIGH'
	- name: Upload Trivy scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: 'trivy-results.sarif'
	- name: 'Scanned'
	shell: bash
	run: echo "::info ::Scanned"
	done:
	runs-on: ubuntu-latest
	needs: [ scan, build ]
	steps:
	- name: 'Done'
	shell: bash
	run: echo "::info ::Done"

Provide feedback