Merge pull request #788 from aaronreed708/disable-docker-scan

Disable docker scan

.github/workflows/publish-docker.yml

@@ -17,16 +17,16 @@ jobs:
     name: ${{ github.event.repository.name }}-docker-scan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: docker-practice/actions-setup-docker@321477a1e481dd60b05f9b489cf4b9be467aa15c
       - name: Build
         run: docker build -f Dockerfile -t user/app:latest .
         working-directory: code
-      - name: Scan for vulnerabilities
-        uses: crazy-max/ghaction-container-scan@dfa7e54dc32045120f06d0bc8d7724860f5db0ad
-        with:
-          image: user/app:latest
-          severity_threshold: HIGH
+      #- name: Scan for vulnerabilities
+      #  uses: crazy-max/ghaction-container-scan@dfa7e54dc32045120f06d0bc8d7724860f5db0ad
+      #  with:
+      #    image: user/app:latest
+      #    severity_threshold: HIGH
   push-to-registry:
     name: Push Docker image to Docker Hub
     needs: docker-scan
@@ -38,25 +38,25 @@ jobs:
       digest: ${{ steps.build_publish.outputs.digest }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@v2.1.0
+        uses: docker/login-action@v3.0.0
         with:
           username: finos
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v4.1.1
+        uses: docker/metadata-action@v5.5.1
         with:
           images: finos/a11y-theme-builder
           tags: |
             type=ref,event=branch
             type=sha
       - name: Build and push Docker image
         id: build_publish
-        uses: docker/build-push-action@v3.2.0
+        uses: docker/build-push-action@v5.1.0
         with:
           context: code
           push: true