Merge pull request #69 from derskythe/dependabot/github_actions/docker/build-push-action-5

Bump docker/build-push-action from 4 to 5

Author: derskythe

.github/workflows/build-base.yml

@@ -128,7 +128,7 @@ jobs:
             type=raw,value=${{ env.FULL_TAG }},enable=true
             type=raw,value=${{ env.PREFIX }},enable=true
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: ${{ env.DOCKERFILE }}
@@ -213,7 +213,7 @@ jobs:
   #         tags: |
   #           type=raw,value=${{ env.FULL_TAG }},enable=true
   #     - name: Build and push
-  #       uses: docker/build-push-action@v4
+  #       uses: docker/build-push-action@v5
   #       with:
   #         context: .
   #         file: Dockerfile.base-slim

.github/workflows/build-image.yml

@@ -121,7 +121,7 @@ jobs:
             type=raw,value=${{ env.PREFIX }}-latest,enable=${{ env.LATEST_FLAG }}
             type=raw,value=${{ env.RELEASE_VERSION }},enable=${{ env.LATEST_FLAG }}
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: ${{ env.DOCKERFILE }}

.github/workflows/snyk-security.yml

@@ -128,7 +128,7 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         run: |
           snyk auth ${{ secrets.SNYK_TOKEN }}
-          snyk code test --sarif > snyk-code.sarif || true
+          snyk code test --fail-on=upgradable --sarif > snyk-code.sarif || true
 
 #        # Build the docker image for testing
 #      - name: Build a Docker image
@@ -142,15 +142,15 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         run: |
           snyk auth ${{ secrets.SNYK_TOKEN }}
-          snyk container test --print-deps ${{ secrets.DOCKER_USER }}/${{ env.RELEASE_IMAGE_NAME }} \
+          snyk container test --print-deps --fail-on=upgradable ${{ secrets.DOCKER_USER }}/${{ env.RELEASE_IMAGE_NAME }} \
           --username=${{ secrets.DOCKER_USER }} --password=${{ secrets.DOCKER_TOKEN }} --file=${{ env.DOCKERFILE }} .
 
       - name: Container test
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         run: |
           snyk auth ${{ secrets.SNYK_TOKEN }}
-          snyk container test --print-deps ghcr.io/${{ secrets.DOCKER_USER }}/${{ env.RELEASE_IMAGE_NAME }} \
+          snyk container test --print-deps ghcr.io/${{ secrets.DOCKER_USER }}/${{ env.RELEASE_IMAGE_NAME }} --fail-on=upgradable \
           --username=${{ secrets.DOCKER_USER }} --password=${{ secrets.DOCKER_TOKEN }} --file=${{ env.DOCKERFILE }} .
 
         # Runs Snyk Container (Container and SCA) analysis and uploads result to Snyk.