Scan the Solr image with Anchore scan, triggered manually for the time being. #115

Author: poikilotherm

.github/workflows/scan-solr-k8s.yaml

@@ -0,0 +1,19 @@
+name: Anchore Scan gdcc/solr-k8s
+on:
+  pull_request:
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - name: Build the Container image
+      run: docker build docker/solr-k8s --tag localbuild/testimage:latest
+    - uses: anchore/scan-action@main
+      id: scan
+      with:
+        image: "localbuild/testimage:latest"
+        acs-report-enable: true
+    - name: upload Anchore scan SARIF report
+      uses: github/codeql-action/upload-sarif@v1
+      with:
+        sarif_file: ${{ steps.scan.outputs.sarif }}