docker-build.yml

name: Continuous Build, Test, Deploy

env:
  IMAGE_NAME: dsopbuilder
  
on:
  workflow_dispatch

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - uses: actions/checkout@v2
      - uses: actions/setup-python@v2
        with:
          python-version: 3.8

      - name: Install requirements
        run: pip install '.[dependencies]'

      - name: Run automated tests  
        run: pytest -vv

  Security_Check:
    needs: build
    runs-on: ubuntu-latest
    steps:
      #Security Check - Bandit
      - uses: actions/checkout@v2
      - name: Security check - Bandit
        uses: ioggstream/bandit-report-artifacts@v0.0.2
        with:
          project_path: .
          ignore_failure: true

      - name: Security check report artifacts
        uses: actions/upload-artifact@v1
        with:
          name: Security report
          path: output/security_report.txt
                      
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v1

  Docker_Build:
    needs: Security_Check
    runs-on: ubuntu-latest
    steps:
      - name: checkout
        uses: actions/checkout@v2

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v1

      - name: Login to DockerHub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v2
        with:
          context: .
          push: true
          tags: | 
            shuffereu/dsopbuilder:latest
            shuffereu/dsopbuilder:${{github.run_number}}