Enable Slack Alert for Container Release Failures (#86)

* add container release alert

* update container scan version

* update container test version

* add CVEs to trivyignore

Author: BrianEllwood

.github/workflows/container-release.yml

@@ -17,4 +17,6 @@ jobs:
       contents: write
       id-token: write
       packages: write
-    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-release.yml@0c3b5555edfbbb10220ed435359dfd6769ad79ed # v3.2.0
+    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-release.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0
+    secrets:
+      release-failure-webhook-url: ${{ secrets.ANALYTICAL_PLATFORM_RELEASE_FAILURE_SLACK_WEBHOOK_URL }}

.github/workflows/container-scan.yml

@@ -13,4 +13,4 @@ jobs:
     name: Container Scan
     permissions:
       contents: read
-    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml@0c3b5555edfbbb10220ed435359dfd6769ad79ed # v3.2.0
+    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-scan.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0

.github/workflows/container-test.yml

@@ -13,4 +13,5 @@ jobs:
     name: Container Test
     permissions:
       contents: read
-    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-test.yml@0c3b5555edfbbb10220ed435359dfd6769ad79ed # v3.2.0
+    uses: ministryofjustice/analytical-platform-github-actions/.github/workflows/reusable-container-test.yml@2ab174150aeb0a6003afd1c0b4316698720b3b6b # v5.5.0
+

.trivyignore

@@ -1 +1,10 @@
 # As of 03/06/2025 there are no vulnerabilities to skip in docker.io/openresty/openresty:1.27.1.2-1-alpine-fat
+
+# alpine 3.21.3 - sha is set to latest so no fix
+CVE-2025-64720 exp:2026-03-17
+CVE-2025-65018 exp:2026-03-17
+CVE-2025-66293 exp:2026-03-17
+CVE-2025-49794 exp:2026-03-17
+CVE-2025-49796 exp:2026-03-17
+CVE-2025-49795 exp:2026-03-17
+CVE-2025-6021 exp:2026-03-17