Scan the Solr image with Anchore scan, triggered manually for the tim…

…e being. #115

.github/workflows/scan-solr-k8s.yaml

@@ -0,0 +1,19 @@
+name: Anchore Scan gdcc/solr-k8s
+on:
+ workflow_dispatch:
+jobs:
+ build:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - name: Build the Container image
+ run: docker build docker/solr-k8s --tag localbuild/testimage:latest
+ - uses: anchore/scan-action@v2
+ id: scan
+ with:
+ image: "localbuild/testimage:latest"
+ acs-report-enable: true
+ - name: upload Anchore scan SARIF report
+ uses: github/codeql-action/upload-sarif@v1
+ with:
+ sarif_file: ${{ steps.scan.outputs.sarif }}