diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..54e8dfd --- /dev/null +++ b/Dockerfile @@ -0,0 +1,9 @@ +FROM registry.jakeyoungdev.com/go/alpine:1.25.3 AS builder +WORKDIR /build +COPY . /build/ +RUN go mod download && \ + GOOS=linux go build ./main.go -o /build/parse + +FROM registry.jakeyoungdev.com/go/alpine:1.25.3 +COPY --from=builder /app/parser / +ENTRYPOINT [ "parser" ] \ No newline at end of file diff --git a/action.yaml b/action.yaml new file mode 100644 index 0000000..31f8856 --- /dev/null +++ b/action.yaml @@ -0,0 +1,15 @@ +name: "compose file parser" +description: "security checks for docker compose files" +inputs: + path: + description: "path to docker compose file" + required: true + default: "compose.yaml" +outputs: + report: + description: "results of the scan" +runs: + using: docker + image: Dockerfile + env: + COMPOSE_FILE_PATH=${{ inputs.path }}