enable vuln scanning

.github/workflows/main.yml

@@ -16,48 +16,44 @@ permissions:
 
 jobs:
   golang_quality:
-    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].12
+    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].14
 
   golang_test:
-    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].12
+    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].14
     needs: [build_openapi_spec] # Validates agains OpenAPI spec
     with:
       services: '{"database": {"image": "mysql:9.0", "ports": ["3306:3306"], "env": {"MYSQL_ROOT_PASSWORD": "mypass", "MYSQL_DATABASE": "remindme"}}}'
       env: '{"TEST_DB_HOST": "database"}'
 
   build_openapi_spec:
-    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].12
+    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].14
     with:
       entrypoint: cmd/remindme/main.go
 
   render_openapi_spec:
     needs: [build_openapi_spec]
-    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].12
+    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].14
     with:
       spec_artifact_name: openapi-spec
       spec_artifact_path: docs/
       spec_filename: swagger.yaml
 
   deploy_openapi_spec:
     needs: [render_openapi_spec]
-    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].12
+    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].14
     with:
       artifact_name: rendered-api-docu
       artifact_path: index.html
 
   build_image:
     needs: [golang_test, golang_quality, render_openapi_spec]
-    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].12
+    uses: CubicrootXYZ/Workflows/.github/workflows/[email protected].14
     with:
       docker_build_args: "--no-cache"
       docker_file_path: "./"
       image_name: "cubicrootxyz/remindme"
       static_tag: "beta"
+      vuln_scan: true
     secrets:
       dockerhub_user: ${{ secrets.DOCKERHUB_USERNAME }}
       dockerhub_token: ${{ secrets.DOCKERHUB_TOKEN }}
-
-  scan_image:
-    uses: anchore/scan-action@v3
-    with:
-      image: "cubicrootxyz/remindme:${{ github.sha }}"