Add ARM64 Docker Build Support to DataEngine CI Pipeline

[mm-kgi]

Add ARM64 Docker Build Support to DataEngine CI/CD Pipeline

Summary

This PR adds ARM64 Docker image build and publishing support to the DataEngine CI/CD pipeline.

The pipeline now supports multi-architecture image creation using Docker Buildx, enabling both AMD64 and ARM64 images to be published under a single Docker tag through a multi-architecture manifest.

Changes

• Added Docker Buildx setup in the CI/CD pipeline
• Enabled multi-platform Docker builds:
  • linux/amd64
  • linux/arm64
• Added multi-architecture manifest publishing
• Preserved existing AMD64 build behavior
• Added support for ARM64 image publishing following existing tagging rules
• Added manual pipeline parameter to trigger ARM64 builds on demand
• Extended security scanning and quality gates to cover ARM64 images
• Added documentation regarding ARM64 build duration investigation and selected build strategy

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA c3ce6d2.

Ensure that dependencies are being submitted on PR branches. Re-running this action after a short time may resolve the issue. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
actions/docker/setup-qemu-action	c7c53464625b32c7a7e944ae62b3e17d2b600130	🟢 8.4	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 9 security policy file detected Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/docker-publish.yml

[github-actions]

Test & Coverage Report

Test Results Summary

Metric	Count
✅ Passed	1330
❌ Failed	0
⏭️ Skipped	0

View Detailed Test Results

---

Code Coverage

Unit Tests Coverage

Package	Line Rate	Branch Rate	Complexity	Health
AAS.TwinEngine.DataEngine	90%	78%	1893	✔
Summary	90% (3000 / 3330)	78% (1248 / 1610)	1893	✔

Minimum allowed line rate is 80%

Module Tests Coverage

Package	Line Rate	Branch Rate	Complexity	Health
AAS.TwinEngine.DataEngine	62%	44%	1893	➖
Summary	62% (2050 / 3330)	44% (702 / 1610)	1893	➖

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud