workflow.yml

# https://github.com/marketplace/actions/docker-lint
name: Workflow
on: [push]

jobs:
  build-secure-and-push:
    runs-on: ubuntu-latest
    env:
        GITHUB_PASS: ${{ secrets.GITHUB_TOKEN }}
        GITHUB_USER: ${{ github.actor }}
        REPO: ${{ github.repository }}
        NAME: misp-modules
        REGISTRY: docker.pkg.github.com
        CONTAINER: ${{ REGISTRY }}/${{ REPO }}:${{ github.sha }}
    steps:
    - name: Checkout
      uses: actions/checkout@v2

    - run: docker build . -t ${{ REGISTRY }}/${{ REPO }}:${{ github.sha }}
    
    # Vulnerability scan
    ## https://github.com/marketplace/actions/container-image-scan
    - uses: Azure/container-scan@v0
      with:
        image-name: ${{ REGISTRY }}/${{ REPO }}:${{ github.sha }}