Create composite actions to build and scan image

.github/actions/build-and-verify-image/action.yml

@@ -0,0 +1,27 @@
+name: "Build and Verify Image"
+description: Common action to build and verify SimpleRisk Docker images
+
+inputs:
+  image_tag:
+    description: "Tag used to build the image"
+  context_path:
+    description: "Path to context"
+  dockerfile_path:
+    description: "Path to Dockerfile"
+
+runs:
+  using: "composite"
+  steps:
+  - uses: docker/setup-buildx-action@v3
+  - name: Build Docker container
+    uses: docker/build-push-action@v5
+    with:
+      context: ${{inputs.context_path}}
+      file: ${{inputs.dockerfile_path}}
+      tags: ${{inputs.image_tag}}
+  - name: Scan vulnerabilities with Grype
+    uses: anchore/[email protected]
+    with:
+      image: ${{inputs.image_tag}}
+      only-fixed: true
+      severity-cutoff: critical

.github/workflows/shellcheck.yml

@@ -2,17 +2,16 @@ name: Shell script checkup with ShellCheck
 
 on:
   pull_request:
-    branch:
-      - master
+    branches: [ master ]
 
 jobs:
   shellcheck:
     name: ShellCheck
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code 
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4.1.0
     - name: Run ShellCheck
       uses: ludeeus/action-shellcheck@master
       with:
-          severity: error 
+        severity: error 

.github/workflows/simplerisk-jammy-push_to_github.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.1.0
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer

.github/workflows/simplerisk-jammy.yml

@@ -0,0 +1,32 @@
+name: Full checkup for SimpleRisk Docker images
+
+on:
+  pull_request:
+    branches: [ master ]
+
+env:
+  IMAGE_TAG: "simplerisk/simplerisk:testing"
+  CONTEXT_PATH: "simplerisk/"
+  DOCKERFILE_PATH: "simplerisk/jammy/Dockerfile"
+  DOCKLE_HOST: "unix:///var/run/docker.sock"
+
+jobs:
+  simplerisk-minimal-php81:
+    name: 'Verify simplerisk/simplerisk image based on Ubuntu 22.04 (Jammy)'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/[email protected]
+      - name: Build and Verify Image
+        uses: ./.github/actions/build-and-verify-image
+        with:
+          image_tag: "${{ env.IMAGE_TAG }}"
+          context_path: "${{ env.CONTEXT_PATH }}"
+          dockerfile_path: "${{ env.DOCKERFILE_PATH }}"
+      # Having issues using this on the composite action above
+      - name: Run linter with Dockle
+        uses: erzz/[email protected]
+        with:
+          image: ${{inputs.image_tag}}
+          failure-threshold: FATAL
+          dockle-host: "unix:///var/run/docker.sock"

.github/workflows/simplerisk-minimal-php81-push_to_github.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.1.0
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer

.github/workflows/simplerisk-minimal-php81.yml

@@ -0,0 +1,32 @@
+name: Full checkup for SimpleRisk Docker images
+
+on:
+  pull_request:
+    branches: [ master ]
+
+env:
+  IMAGE_TAG: "simplerisk/simplerisk-minimal:testing"
+  CONTEXT_PATH: "simplerisk-minimal/"
+  DOCKERFILE_PATH: "simplerisk-minimal/php81/Dockerfile"
+  DOCKLE_HOST: "unix:///var/run/docker.sock"
+
+jobs:
+  simplerisk-minimal-php81:
+    name: 'Verify simplerisk/simplerisk-minimal image based on php:8.1-apache'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/[email protected]
+      - name: Build and Verify Image
+        uses: ./.github/actions/build-and-verify-image
+        with:
+          image_tag: "${{ env.IMAGE_TAG }}"
+          context_path: "${{ env.CONTEXT_PATH }}"
+          dockerfile_path: "${{ env.DOCKERFILE_PATH }}"
+      # Having issues using this on the composite action above
+      - name: Run linter with Dockle
+        uses: erzz/[email protected]
+        with:
+          image: ${{inputs.image_tag}}
+          failure-threshold: FATAL
+          dockle-host: "unix:///var/run/docker.sock"