msagi is vulnerability scanning Container #169

	name: scan-container-for-vulnerabilities
	run-name: ${{ github.actor }} is vulnerability scanning Container
	on:
	schedule:
	- cron: '0 0 * * *'
	workflow_dispatch:
	jobs:
	scan-for-container-vulnerabilty:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	-
	name: Checkout
	uses: actions/checkout@v3
	-
	name: Login to Docker Hub
	uses: docker/login-action@v2
	with:
	username: ${{ secrets.DOCKERHUB_USERNAME }}
	password: ${{ secrets.DOCKERHUB_TOKEN }}
	-
	name: Build
	uses: docker/build-push-action@v4
	with:
	context: .
	push: true
	tags: msaginwm/devsecops-base:latest
	-
	name: Scan for vulnerabilities
	id: scan
	uses: crazy-max/ghaction-container-scan@v2
	with:
	image: msaginwm/devsecops-base:latest
	dockerfile: ./Dockerfile
	-
	name: Upload SARIF file
	if: ${{ steps.scan.outputs.sarif != '' }}
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: ${{ steps.scan.outputs.sarif }}

Provide feedback