feat(github action): Added workflow

.github/workflows/ci.yml

@@ -0,0 +1,81 @@
+---
+name: CI Bmeme GCP Image Builder container image
+on:
+  push:
+    branches:
+      - "*"
+      - "*/*"
+      - "**"
+      - "!main"
+
+env:
+  registry: docker.io
+  repository: bmeme/gcp-image-builder
+
+jobs:
+
+
+  build:
+    name: Build and test Bmeme GCP Image Builder container image using Docker
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Check out the codebase.
+        uses: actions/checkout@v3
+      -
+        name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      -
+        name: Lint Dockerfile
+        id: lint
+        uses: hadolint/[email protected]
+        with:
+          dockerfile: ./Dockerfile
+          config: .hadolint.yaml
+      -
+        name: Build image
+        id: build
+        run: |
+          {
+            TAG=$(cat Dockerfile | grep com.bmeme.project.version | awk -F\' '{print $2}');\
+            \
+            docker build \
+              -t ${{ env.registry }}/${{ env.repository }}:${TAG} \
+              -t ${{ env.registry }}/${{ env.repository }}:latest \
+              -f ./Dockerfile .
+          }
+      -
+        name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        id: trivy
+        with:
+          image-ref: ${{ env.registry }}/${{ env.repository }}:latest
+          format: 'sarif'
+          exit-code: '0'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL'
+          output: 'trivy-results-gke-helm-deployer.sarif'
+      -
+        name: Upload Trivy scan results to GitHub Security tab
+        id: trivy-upload
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: 'trivy-results-gke-helm-deployer.sarif'
+      -
+        name: Scan image
+        id: scan
+        uses: anchore/scan-action@v3
+        with:
+          image: ${{ env.registry }}/${{ env.repository }}:latest
+          severity-cutoff: critical
+          fail-build: false
+      -
+        name: Upload Anchore scan SARIF report
+        id: scan-upload
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: ${{ steps.scan.outputs.sarif }}

.github/workflows/release.yml

@@ -0,0 +1,47 @@
+---
+name: Release Bmeme GCP Image Builder container image
+on:
+  push:
+    branches:
+      - "main"
+
+env:
+  registry: docker.io
+  repository: bmeme/gcp-image-builder
+
+jobs:
+
+  build:
+    name: Build and test Bmeme GCP Image Builder container image using Docker
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Check out the codebase.
+        uses: actions/checkout@v3
+      -
+        name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      -
+        name: Build image
+        id: build
+        run: |
+          {
+            TAG=$(cat Dockerfile | grep com.bmeme.project.version | awk -F\' '{print $2}');\
+            \
+            docker build \
+              -t ${{ env.registry }}/${{ env.repository }}:${TAG} \
+              -t ${{ env.registry }}/${{ env.repository }}:latest \
+              -f ./Dockerfile .
+          }
+      -
+        name: Push images to Docker Hub
+        id: push
+        run: |
+          {
+            TAG=$(cat Dockerfile | grep com.bmeme.project.version | awk -F\' '{print $2}');\
+            docker push ${{ env.registry }}/${{ env.repository }}:${TAG}; \
+            docker push ${{ env.registry }}/${{ env.repository }}:latest; \
+          }

.hadolint.yaml

@@ -8,3 +8,4 @@ ignored:
 
 trustedRegistries:
   - docker.io
+  - gcr.io

Dockerfile

@@ -1,5 +1,5 @@
 FROM google/cloud-sdk:455.0.0-alpine as googlecloud-cli
-FROM gcr.io/kaniko-project/executor AS kaniko
+FROM gcr.io/kaniko-project/executor:v1.19.2 AS kaniko
 
 FROM docker:24.0.7
 LABEL com.bmeme.project.family='GKE-Docker Builder Image' \