Skip to content

correct dockerhub secrets location (#322) #4

correct dockerhub secrets location (#322)

correct dockerhub secrets location (#322) #4

Workflow file for this run

name: Build and Scan Docker Images
on:
workflow_dispatch:
push:
branches:
- main
jobs:
build-and-scan:
name: ${{ matrix.folder }}
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
folder: ["curl", "httpd", "locust", "nginx", "wireshark"]
steps:
- name: Checkout Repository
uses: actions/[email protected]
- name: Log in to Docker Hub
# Required for Docker Scout
uses: docker/[email protected]
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Build Docker Image
run: |
FILES=$(find ./${{ matrix.folder }} -type f -iname 'dockerfile*')
if [ -z "$FILES" ]; then
echo "No Dockerfiles found in folder: ${{ matrix.folder }}. Skipping build."
exit 1
fi
for FILE in $FILES; do
IMAGE_NAME="${{ matrix.folder }}-$(basename $FILE | tr '[:upper:]' '[:lower:]' | tr -cd '[:alnum:]-')"
echo "Building Docker image: $IMAGE_NAME using $FILE"
docker build -t $IMAGE_NAME -f $FILE ./${{ matrix.folder }}
echo "IMAGE_NAME=$IMAGE_NAME" >> $GITHUB_ENV
done
- name: Scan Docker Image
uses: docker/[email protected]
with:
image: ${{ env.IMAGE_NAME }}
command: cves,recommendations
sarif-file: sarif.output.json
- name: Export the Results
uses: actions/[email protected]
with:
name: docker-scout-sarif-${{ matrix.folder }}
path: sarif.output.json