# This is a basic workflow to help you get started with Actions

name: Build

# Controls when the action will run.

on: [push, pull_request, workflow_dispatch]

# A workflow run is made up of one or more jobs that can run sequentially or in parallel

jobs:

# This workflow contains a single job called "build"

build:

# The type of runner that the job will run on

runs-on: ubuntu-latest

# Steps represent a sequence of tasks that will be executed as part of the job

steps:

# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it

- uses: actions/checkout@v2

- name: Set up QEMU

uses: docker/setup-qemu-action@v1

- name: Set up Docker Buildx

id: buildx

uses: docker/setup-buildx-action@v1

- name: Inspect builder

run: |

echo "Name: ${{ steps.buildx.outputs.name }}"

echo "Endpoint: ${{ steps.buildx.outputs.endpoint }}"

echo "Status: ${{ steps.buildx.outputs.status }}"

echo "Flags: ${{ steps.buildx.outputs.flags }}"

echo "Platforms: ${{ steps.buildx.outputs.platforms }}"

- name: Build the image multiplatform

run: docker buildx build --output "type=image,push=false" --platform linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/ppc64le,linux/s390x --tag mendhak/http-https-echo:latest --file ./Dockerfile .

- name: Build the image single platform and run tests

run: ./tests.sh

- name: Scan the image

id: scan

uses: anchore/scan-action@v2

with:

image: "mendhak/http-https-echo:latest"

debug: false

acs-report-enable: true

- name: upload Anchore scan SARIF report

uses: github/codeql-action/upload-sarif@v1

with:

sarif_file: ${{ steps.scan.outputs.sarif }}