This repository has been archived by the owner on Jul 18, 2024. It is now read-only.

Update anchore/sbom-action action to v0.17.0 #58

	name: lint, test and build image
	on: [pull_request, push]

	jobs:
	lint-test:
	runs-on: ubuntu-latest
	steps:
	- name: Install Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.21'
	- name: Checkout code
	uses: actions/checkout@v4
	- name: golangci-lint
	uses: golangci/golangci-lint-action@v4
	with:
	args: --config .golangci.yml --timeout 2m
	version: v1.55.2
	- name: Test
	run: go test ./...
	build:
	runs-on: ubuntu-latest
	needs: [lint-test]
	steps:
	- name: Install Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.21'

	- name: Checkout code
	uses: actions/checkout@v4

	- name: build binary
	run: make build

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Build Docker image - no push
	id: docker-build
	uses: docker/build-push-action@v5
	with:
	context: .
	push: false
	tags: ghcr.io/metal-toolbox/fleet-rest-skeleton:latest
	file: Dockerfile

	- name: Scan image
	id: scan-image
	uses: anchore/scan-action@v3
	with:
	image: ghcr.io/metal-toolbox/fleet-rest-skeleton:latest
	acs-report-enable: true
	# TODO(joel): Fail build once we migrate off CentOS.
	fail-build: false

	# TODO(joel): Uncomment once we migrate off CentOS.
	# - name: upload Anchore scan SARIF report
	# uses: github/codeql-action/upload-sarif@v2
	# with:
	# sarif_file: ${{ steps.scan.outputs.sarif }}
	# # This should run even if we fail the container scan
	# if: always()

	- name: Inspect action SARIF report
	run: cat ${{ steps.scan.outputs.sarif }}
	# This should run even if we fail the container scan
	if: always()

Provide feedback