actions.yml

name: Workflow
on:  # yamllint disable-line rule:truthy
  push:
    branches: [main]
  pull_request:
    branches: [main]
jobs:

  sanitize:
    name: Check for forbidden words
    runs-on: ubuntu-latest
    steps:
      - name: Checkout the code
        uses: actions/checkout@v4
      - name: Run the forbidden words scan
        uses: dell/common-github-actions/code-sanitizer@main
        with:
          args: /github/workspace

  image_security_scan:
    name: Image Scanner
    runs-on: ubuntu-latest
    steps:
      - name: Set up Go latest
        uses: actions/setup-go@v5
        with:
          go-version: "1.23"
        id: go
      - name: Checkout the code
        uses: actions/checkout@v4
      - name: Install Mockgen
        run: go get github.com/golang/mock/mockgen@v1.6.0
      - name: Get dependencies
        run: go mod download
      - name: Build csm-metrics-powerstore Docker Image
        run: |
          chmod +x ./scripts/build_ubi_micro.sh
          make build-base-image
          podman build -t docker.io/csm-metrics-powerstore -f ./Dockerfile --build-arg GOIMAGE=golang:latest --build-arg BASEIMAGE="localhost/mpst-ubimicro"
          podman save docker.io/library/csm-metrics-powerstore -o /tmp/csm-metrics-powerstore.tar
          docker load -i /tmp/csm-metrics-powerstore.tar
      - name: Run Trivy action
        uses: aquasecurity/trivy-action@master
        with:
          image-ref: csm-metrics-powerstore