Anchore Grype vulnerability scan #21

	name: Anchore Grype vulnerability scan

	on:
	repository_dispatch:
	types: [image-push]
	schedule:
	- cron: "21 21 * * 1"

	permissions:
	contents: read
	security-events: write
	actions: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	Anchore-Build-Scan:
	runs-on: ubuntu-latest
	env:
	IMAGE_NAME: pptx2video

	steps:
	- name: Check out the code
	uses: actions/checkout@v4

	- name: Build the Docker image
	run: docker build . --file Dockerfile --tag ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:latest

	- name: Run the Anchore Grype scan action
	uses: anchore/scan-action@d5aa5b6cb9414b0c7771438046ff5bcfa2854ed7
	id: scan
	with:
	image: "ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:latest"
	fail-build: false
	severity-cutoff: critical

	- name: Upload vulnerability report
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: ${{ steps.scan.outputs.sarif }}

Provide feedback