tests

Update bufbuild/buf Docker tag to v1.49.0 #260

	name: tests

	on:
	push:
	branches: [master, main]
	paths-ignore: ['**.md']
	tags-ignore: ['**']
	pull_request:
	paths-ignore: ['**.md']

	jobs:
	gitleaks:
	name: Gitleaks
	runs-on: ubuntu-24.04
	steps:
	- uses: actions/checkout@v4
	with: {fetch-depth: 0}

	- name: Check for GitLeaks
	uses: gacts/gitleaks@v1 # Action page: <https://github.com/gacts/gitleaks>

	docker-image:
	name: Build and scan the docker image
	runs-on: ubuntu-24.04
	services:
	registry:
	image: registry:2
	ports:
	- 5000:5000
	steps:
	- name: Check out code
	uses: actions/checkout@v4

	- uses: docker/setup-qemu-action@v3 # Action page: <https://github.com/docker/setup-qemu-action>

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3 # Action page: <https://github.com/docker/setup-buildx-action>
	with:
	driver-opts: network=host

	- name: Build image
	uses: docker/build-push-action@v6 # Action page: <https://github.com/docker/build-push-action>
	with:
	context: .
	file: Dockerfile
	push: true
	platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
	tags: localhost:5000/app:local

	- name: Scan image
	id: scan
	uses: anchore/scan-action@v6 # action page: <https://github.com/anchore/scan-action>
	with:
	image: localhost:5000/app:local
	acs-report-enable: true
	fail-build: false

	- name: upload Anchore scan SARIF report
	if: ${{ always() }}
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: ${{ steps.scan.outputs.sarif }}

Provide feedback