docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add Scout GHA mentions to general section 

Signed-off-by: Chris Chinchilla <chris.ward@docker.com>
This commit is contained in:
Chris Chinchilla 2023-06-26 15:32:14 +02:00
parent 5565e01f55
commit 380e11fbf5
No known key found for this signature in database
GPG Key ID: 78FA9FB7CEAE483F
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
build/ci/github-actions/index.md
View File

@ -28,6 +28,8 @@ The following GitHub Actions are available:
builds. builds.
- [Docker Buildx Bake](https://github.com/marketplace/actions/docker-buildx-bake){:target="blank" rel="noopener" class=""}: - [Docker Buildx Bake](https://github.com/marketplace/actions/docker-buildx-bake){:target="blank" rel="noopener" class=""}:
enables using high-level builds with [Bake](../../bake/index.md). enables using high-level builds with [Bake](../../bake/index.md).
- [Docker Scout](https://github.com/docker/scout-action){:target="blank" rel="noopener" class=""}:
analyze Docker images for security vulnerabilities.
Using Docker's actions provides an easy-to-use interface, while still allowing Using Docker's actions provides an easy-to-use interface, while still allowing
flexibility for customizing build parameters. flexibility for customizing build parameters.
@ -50,6 +52,7 @@ refer to the following sections:
- [Share built image between jobs](share-image-jobs.md) - [Share built image between jobs](share-image-jobs.md)
- [Test before push](test-before-push.md) - [Test before push](test-before-push.md)
- [Update Docker Hub repository description](update-dockerhub-desc.md) - [Update Docker Hub repository description](update-dockerhub-desc.md)
- [Analyzing images with Docker Scout](../../../scout/ci.md)
## Get started with GitHub Actions ## Get started with GitHub Actions

5
scout/ci.md
View File

@ -18,10 +18,9 @@ The following example works in a repository containing a Docker image's definiti
image and uses Docker Scout to compare the new version to the current published image and uses Docker Scout to compare the new version to the current published
version. version.
<!-- Create action? -->
First, set up the rest of the workflow. There's a lot that's not specific to Docker First, set up the rest of the workflow. There's a lot that's not specific to Docker
Scout but needed to create the images to compare. Scout but needed to create the images to compare. For more details on those actions and using GitHub Actions
with Docker in general, see [the GitHub Actions documentation](../build/ci/github-actions/index.md).
Add the following to a GitHub action YAML file: Add the following to a GitHub action YAML file: