Skip to content

Commit b2eecb7

Browse files
committed
ci(gha): add steps to perform container image scan
1 parent 43fb209 commit b2eecb7

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

.github/workflows/pipeline.yml

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -219,17 +219,21 @@ jobs:
219219
# if: ${{ steps.bump-version.outputs.is-dryrun-version-bumped == 'true' }}
220220
uses: docker/build-push-action@v6
221221
with:
222-
push: false
222+
load: true
223223
tags: ${{ steps.meta.outputs.tags }}
224224
labels: ${{ steps.meta.outputs.labels }}
225225
sbom: true
226226
provenance: true
227227
- name: Convert Image to Tar
228-
run: docker save -o companieshouse.tar ${{ steps.meta.outputs.tags }}
228+
run: |
229+
docker images
230+
tags="${{ steps.meta.outputs.tags }}"
231+
tags="${tags//,/ }" # replace commas with spaces
232+
echo "Saving images: $tags"
229233
- name: Scan Image
230234
uses: aquasecurity/[email protected]
231235
with:
232-
image-ref: companieshouse.tar
236+
image-ref: ${{ steps.meta.outputs.tags }}
233237
format: 'table'
234238
exit-code: '1'
235239
ignore-unfixed: true

0 commit comments

Comments
 (0)