- push the docker image to docker hub - use gosec, go-lint-actions for code linting - trivy for scanning images