schedule.yml

name: AIO Builder

on:
  #schedule:
    #- cron: '0 1 7,14,21,28 1-12 ?'
  push:
    paths:
    - '.github/workflows/schedule.yml'
    - 'build.sh'
    - 'dvst.sh'
    branches:
    - 'main'

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2.3.4
    - uses: docker/login-action@v1.14.1
      with:
        username: rzlamrr
        password: ${{ secrets.DOCKERHUB_TOKEN }}
    - name: Build & Push
      run: bash build.sh

  scan:
    runs-on: ubuntu-latest
    needs:
      - build
    steps:
    - uses: actions/checkout@v2.3.4
    - uses: docker/login-action@v1.14.1
      with:
        username: rzlamrr
        password: ${{ secrets.DOCKERHUB_TOKEN }}
    - name: Scan Image
      run: |
        curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
        echo \
        "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu \
        $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
        sudo apt update
        DEBIAN_FRONTEND=noninteractive sudo apt install -qqy docker-scan-plugin
        bash build.sh scan
      env:
        SNYK_AUTH_TOKEN: ${{ secrets.SNYK_TOKEN }}
    - name: Stage & Commit
      run: |
        git config --local user.email "rzlamrr.dvst@protonmail.com"
        git config --local user.name "rzlamrr"
        git add scan/
        git commit -m "ci: scan result"
    - uses: ad-m/github-push-action@v0.6.0
      with:
        directory: "scan/"
        branch: ${{ github.ref }}
        github_token: ${{ secrets.GITHUB_TOKEN }}