grype.yml

name: Grype
on:
  workflow_call:
    inputs:
      image:
        required: true
        type: string
      digest:
        required: true
        type: string
    secrets:
      registry_user:
        required: true
      registry_password:
        required: true
jobs:
  grype:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Login to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.registry_user }}
          password: ${{ secrets.registry_password }}
      - uses: actions/setup-java@v3
        with:
          distribution: temurin
          java-version: 11
      - name: Setup Gradle
        uses: gradle/gradle-build-action@v2
        with:
          cache-read-only: false
          arguments: ${{ inputs.image }}:grype ${{ inputs.digest }} --info
      - uses: actions/upload-artifact@v3
        if: always()
        with:
          name: Grype Reports
          path: build/**/*-grype.*