docker-scan.yaml

# name: Scan Docker Image

# on:
#   workflow_dispatch:

# env:
#   DOCKER_IMAGE: docker-operator
#   BIN_NAME: docker-operator

# jobs:
#   release-docker-hub:
#     runs-on: ubuntu-latest
#     steps:
#       - name: Docker image metadata
#         id: meta
#         uses: docker/metadata-action@v4
#         with:
#           images: ${{ env.DOCKER_IMAGE }}
#           tags: |
#             type=sha,format=long
          
#       - name: Set up QEMU
#         uses: docker/setup-qemu-action@v2
#         with:
#           platforms: amd64

#       - name: Set up Docker Buildx
#         uses: docker/setup-buildx-action@v2

#       - name: Build and load Docker image
#         uses: docker/build-push-action@v3
#         with:
#           platforms: linux/amd64
#           push: false
#           load: true
#           tags: ${{ steps.meta.outputs.tags }}

#       - name: Run Trivy vulnerability scanner
#         uses: aquasecurity/trivy-action@master
#         with:
#           scan-type: image
#           format: sarif
#           image-ref: ${{ steps.meta.outputs.tags }}
#           output: 'trivy-results.sarif'
#           exit-code: '1'

#       - name: Upload Trivy scan results to GitHub Security tab
#         uses: github/codeql-action/upload-sarif@v2
#         with:
#           category: 'Trivy Security Scan'
#           sarif_file: 'trivy-results.sarif'