Bump cloud.google.com/go/monitoring from 1.7.0 to 1.21.1 #707
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Build the Docker Image | |
| on: | |
| workflow_dispatch: | |
| # Allow manual triggers via GitHub Actions tab | |
| pull_request: | |
| types: [opened, reopened, edited, synchronize] | |
| branches: | |
| - master | |
| jobs: | |
| test-docker-image-build: | |
| name: Build Image and Run Trivy Scan | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v4 | |
| - name: Create a test tag | |
| run: echo "image-tag=ts-bridge:test" >> $GITHUB_ENV | |
| - name: Build Docker Image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: false | |
| tags: ${{ env.image-tag }} | |
| - name: Run Trivy vulnerability scanner | |
| uses: aquasecurity/trivy-action@master | |
| with: | |
| image-ref: ${{ env.image-tag }} | |
| format: "table" | |
| ignore-unfixed: true | |
| exit-code: "1" # Exit with 1 if vulnerabilities listed below are found. |