Skip to content

Security Check

Security Check #364

Workflow file for this run

name: Security Check
on:
workflow_dispatch:
schedule:
- cron: '0 1 * * *'
permissions:
contents: read
security-events: write
jobs:
scan:
name: 'Image Scan (PHP: ${{ matrix.php-version }})'
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
php-version:
- '8.1'
- '8.2'
- '8.3'
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Pull image
run: docker pull shopware/docker-base:${{ matrix.php-version }}
- name: Scan for vulnerabilities
id: scan
uses: crazy-max/ghaction-container-scan@v3
with:
image: shopware/docker-base:${{ matrix.php-version }}
dockerfile: ./${{ matrix.php-version }}/Dockerfile
- name: Upload SARIF file
if: ${{ steps.scan.outputs.sarif != '' }}
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: ${{ steps.scan.outputs.sarif }}