Skip to content

Commit e6a0087

Browse files
committed
Give Anchore a new chance
1 parent 19a5a19 commit e6a0087

1 file changed

Lines changed: 14 additions & 14 deletions

File tree

.github/workflows/anchore-analysis.yml

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -14,17 +14,17 @@ jobs:
1414
Anchore-Build-Scan:
1515
runs-on: ubuntu-latest
1616
steps:
17-
- name: Checkout the code
18-
uses: actions/checkout@v2
19-
- name: Build the Docker image
20-
run: docker build . --file Dockerfile --tag localbuild/testimage:latest
21-
- name: Run the local Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
22-
uses: anchore/scan-action@main
23-
with:
24-
image: "localbuild/testimage:latest"
25-
dockerfile-path: "Dockerfile"
26-
acs-report-enable: true
27-
- name: Upload Anchore Scan Report
28-
uses: github/codeql-action/upload-sarif@v1
29-
with:
30-
sarif_file: results.sarif
17+
- name: Set up Docker Buildx
18+
uses: docker/setup-buildx-action@v1
19+
20+
- name: build local container
21+
uses: docker/build-push-action@v2
22+
with:
23+
tags: localbuild/testimage:latest
24+
push: false
25+
load: true
26+
27+
- name: Scan image
28+
uses: anchore/scan-action@v3
29+
with:
30+
image: "localbuild/testimage:latest"

0 commit comments

Comments
 (0)