alpine-php/.github/workflows/pr.yaml at 309806edc986801e242f9559e4e947f6126eb53d · jorge07/alpine-php · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
name: PR checks

on:
  pull_request:
    branches:
      - master

jobs:
  pr:
    strategy:
      fail-fast: false
      matrix:
        version: [ "8.1", "8.2", "8.3", "8.4" ]

    name: ${{ matrix.version }}
    runs-on: ubuntu-latest
    env:
      VERSION: ${{ matrix.version }}
    steps:
    - uses: actions/checkout@v6
    - name: Set up QEMU
      uses: docker/setup-qemu-action@v3
    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v4
    - name: Login to Docker Hub
      # Optional: avoids pull rate limits. Not available on fork PRs — that's fine.
      uses: docker/login-action@v3
      continue-on-error: true
      with:
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}
    - name: Build
      run: ARCHS="linux/amd64" make build
    - name: Trivy vulnerability scan (main image)
      uses: aquasecurity/trivy-action@0.29.0
      with:
        image-ref: jorge07/alpine-php:${{ matrix.version }}
        format: table
        exit-code: "1"
        ignore-unfixed: true
        vuln-type: os,library
        severity: CRITICAL
    - name: Test Main
      run: make test-main
    - name: Test Dev
      run: make test-dev