owncast/.github/workflows/container-lint.yml

name: Lint

on:
  push:
    branches:
      - develop
    paths:
      - 'Dockerfile'
  pull_request:
    branches:
      - develop
    paths:
      - 'Dockerfile'

jobs:
  trivy:
    name: Dockerfile
    runs-on: ubuntu-latest
    container:
      image: aquasec/trivy
    steps:
      - uses: actions/checkout@v3

      - name: Check critical issues
        run: trivy config --exit-code 1 --severity "HIGH,CRITICAL" ./Dockerfile

      - name: Check non-critical issues
        run: trivy config --severity "LOW,MEDIUM" ./Dockerfile
set a non-root user for containers (#2496) * change root user in dockerfile * build container on push/pr * grab docker build params from env * consolidate container build * rm unused container build workflow/script * cleanup ci * set user for earthly container build * rm ci docker build for develop branch * checkout full repo for docker builds * read earthly push from env * cleanup ci * rm unsupported option for actions/checkout@v3 * check dockerfile in ci * add dockerfile build to earthfile * authenticate to GH only on schedule builds * accurate name for dev container builder script * add note to the dockerfile about earthfile * document dev build process more clearly 2023-01-05 01:15:12 +03:00			`name: Lint`

			`on:`
			`push:`
			`branches:`
Remove references to webv2 branch in docs and builds 2023-01-28 03:18:02 +03:00			`- develop`
set a non-root user for containers (#2496) * change root user in dockerfile * build container on push/pr * grab docker build params from env * consolidate container build * rm unused container build workflow/script * cleanup ci * set user for earthly container build * rm ci docker build for develop branch * checkout full repo for docker builds * read earthly push from env * cleanup ci * rm unsupported option for actions/checkout@v3 * check dockerfile in ci * add dockerfile build to earthfile * authenticate to GH only on schedule builds * accurate name for dev container builder script * add note to the dockerfile about earthfile * document dev build process more clearly 2023-01-05 01:15:12 +03:00			`paths:`
			`- 'Dockerfile'`
			`pull_request:`
			`branches:`
Remove references to webv2 branch in docs and builds 2023-01-28 03:18:02 +03:00			`- develop`
set a non-root user for containers (#2496) * change root user in dockerfile * build container on push/pr * grab docker build params from env * consolidate container build * rm unused container build workflow/script * cleanup ci * set user for earthly container build * rm ci docker build for develop branch * checkout full repo for docker builds * read earthly push from env * cleanup ci * rm unsupported option for actions/checkout@v3 * check dockerfile in ci * add dockerfile build to earthfile * authenticate to GH only on schedule builds * accurate name for dev container builder script * add note to the dockerfile about earthfile * document dev build process more clearly 2023-01-05 01:15:12 +03:00			`paths:`
			`- 'Dockerfile'`

			`jobs:`
			`trivy:`
			`name: Dockerfile`
			`runs-on: ubuntu-latest`
			`container:`
			`image: aquasec/trivy`
			`steps:`
			`- uses: actions/checkout@v3`

			`- name: Check critical issues`
			`run: trivy config --exit-code 1 --severity "HIGH,CRITICAL" ./Dockerfile`

			`- name: Check non-critical issues`
			`run: trivy config --severity "LOW,MEDIUM" ./Dockerfile`