Add container scanner step

.github/actions/build-and-push-to-ecr/action.yml

@@ -67,9 +67,29 @@ runs:
       uses: docker/setup-qemu-action@v3
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
-    - name: Build and push image
-      id: build-and-push
-      uses: docker/build-push-action@v5
+    - name: Build image
+      id: build
+      uses: docker/build-push-action@v6
+      with:
+        context: ${{ inputs.docker-build-context }}
+        file: ${{ inputs.dockerfile-path }}
+        platforms: ${{ inputs.docker-build-platforms }}
+        push: false
+        tags: ${{ steps.login-ecr.outputs.registry }}/${{ inputs.ecr-repository-name }}:${{ inputs.docker-image-tag }}
+        cache-from: type=gha
+        cache-to: type=gha,mode=max
+        build-args: ${{ inputs.docker-build-args }}
+        no-cache: ${{ inputs.docker-no-cache }}
+    - name: Run Container Scan
+      id: container-scan
+      uses: experian-marketing-services/gha-container-scanner@v1
+      with:
+        container: ${{ steps.login-ecr.outputs.registry }}/${{ inputs.ecr-repository-name }}:${{ inputs.docker-image-tag }}
+        wiz_key_id: ${{ secrets.WIZ_KEY_ID }}
+        wiz_key_secret: ${{ secrets.WIZ_KEY_SECRET }}
+    - name: Push image
+      id: push
+      uses: docker/build-push-action@v6
       with:
         context: ${{ inputs.docker-build-context }}
         file: ${{ inputs.dockerfile-path }}