release.yml

name: Release app
on:
  push:
    branches:
      - main

jobs:
  testCode:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Go
        uses: actions/setup-go@v4

      - name: Check out code
        uses: actions/checkout@v3

      - name: Test the app
        run: go test -v ./...

  build-and-push:
    name: Build and push to Docker Image
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Run Image Scan
        uses: aquasecurity/trivy-action@0.15.0
        with:
          image-ref: 'gmontalvoy/goapp:${{ github.sha }}'

      - name: build and push
        uses: docker/build-push-action@v4
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: gmontalvoy/goapp:${{ github.sha }}

  compliance:
    needs: [testCode, build-and-push ]
    runs-on: ubuntu-latest
    steps:
      - name: Security checks
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Run Image Scan
        uses: aquasecurity/trivy-action@0.15.0
        with:
          image-ref: 'gmontalvoy/goapp:${{ github.sha }}'