check_build.yml

name: Build EE2 Docker Image

on:
  pull_request

jobs:
  docker:
    runs-on: ubuntu-latest
    services:
      registry:
        image: registry:2
        ports:
          - 5000:5000
      -
        name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      -
        name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        
      - 
        name: Build and Push to Local Registry
        uses: docker/build-push-action@v6
        with:
          push: true
          tags: localhost:5000/ee2/test:latest

          
      - 
        name: Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@0.28.0
        with:
          image-ref: 'localhost:5000/ee2/test:latest'
          format: 'table'
          exit-code: '1'
          ignore-unfixed: true
          vuln-type: 'os,library'
          severity: 'CRITICAL,HIGH'