build_push_check_deploy.yml

name: build push check
on:
  push:
    branches:
      - '*'

jobs:
  build_push:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - name: Login to GitHub Container Registry
      uses: docker/login-action@v1 
      with:
        registry: ghcr.io
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GITHUB_TOKEN }}
    - name: Docker meta
      id: meta
      uses: docker/metadata-action@v3
      with:
        images: ghcr.io/aragon/protocol-backend
        flavor: |
          latest=${{ github.ref == 'refs/heads/master' }}
        tags: |
          type=ref,event=branch
          type=sha,event=branch,prefix={{branch}}-,format=short
          type=semver,pattern={{version}}
    - name: Build
      id: docker_build
      uses: docker/build-push-action@v2
      with:
        push: true
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}
    - uses: Azure/container-scan@v0
      id: scan
      continue-on-error: true
      with:
        run-quality-checks: true
        image-name: ${{ fromJSON(steps.meta.outputs.json).tags[0] }}