environment.yml

name: Create environment 

on:
  push:
    paths:
      - Dockerfile
      - config/*
      - .github/workflows/environment.yml
      - bin/*
  workflow_dispatch:

jobs:
  docker-build:
    runs-on: ubuntu-22.04
    container: philipssoftware/node:lts

    steps:
      - name: Checkout Continuous Compliance 
        uses: actions/checkout@v4

      - name: Build Docker Images
        uses: philips-software/docker-ci-scripts@v5.1.0
        with:
          dockerfile: .
          image-name: continuous-compliance
          tags: latest 0.6.1
          push-branches: main develop
          sign: true
          sbom: true
          slsa-provenance: true
        env:
          REGISTRY_USERNAME: ${{ github.actor }}
          REGISTRY_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          REGISTRY_URL: ghcr.io/philips-labs
          GITHUB_ORGANIZATION: philips-labs
          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
          COSIGN_PUBLIC_KEY: ${{ secrets.COSIGN_PUBLIC_KEY }}