Change alpine base image && setup fzf #53

	name: Build and scan 🕷️📦

	on:
	push:
	tags:
	- 'v..*'

	permissions:
	actions: read
	contents: read
	security-events: write

	env:
	REPOSITORY: docker.io/containerscrew/infratools

	jobs:
	build:
	name: build
	runs-on: ubuntu-latest
	steps:
	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Login to Docker Hub
	uses: docker/login-action@v3
	with:
	username: ${{ secrets.DOCKERHUB_AUTH_USERNAME }}
	password: ${{ secrets.DOCKERHUB_AUTH_TOKEN }}

	# Step to set Docker tag based on the generated GitHub tag
	- name: Set container tag
	id: set_tag
	run: \|
	# Extract the tag name from the full reference
	IMAGE_TAG=$(echo "${{ github.ref }}" \| sed 's\|.*/\|\|')
	echo "IMAGE_TAG=$IMAGE_TAG" >> "$GITHUB_ENV"

	- name: Build and push
	uses: docker/build-push-action@v6
	with:
	platforms: linux/amd64,linux/arm64
	push: true
	tags: ${{ env.REPOSITORY }}:latest,${{ env.REPOSITORY }}:${{ env.IMAGE_TAG }}
	sec:
	name: sec
	runs-on: ubuntu-latest
	needs: build
	steps:
	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: '${{env.REPOSITORY}}:${{env.IMAGE_TAG}}'
	format: 'sarif'
	output: 'trivy-results.sarif'
	vuln-type: 'os,library'
	ignore-unfixed: false
	env:
	TRIVY_USERNAME: ${{ secrets.DOCKERHUB_AUTH_USERNAME }}
	TRIVY_PASSWORD: ${{ secrets.DOCKERHUB_AUTH_TOKEN }}

	- name: Upload Trivy scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: 'trivy-results.sarif'

Provide feedback