Scan Image #6

	name: "Scan Image"

	on:
	workflow_dispatch:
	repository_dispatch:
	types: [build-completed]
	branches:
	- main

	jobs:
	scan:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	id-token: write
	attestations: write

	steps:
	- name: Checkout Repository
	uses: actions/checkout@v4

	- name: Login to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.repository_owner }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Image scanning with Trivy
	uses: aquasecurity/trivy-action@v0.5.0
	with:
	image-ref: ghcr.io/${{ github.repository_owner }}/pptx2video:latest

	- name: Image scanning with Grype
	uses: anchore/grype-action@v0.2.3
	with:
	image: ghcr.io/${{ github.repository_owner }}/pptx2video:latest

	- name: Upload Artifact - Security Reports
	uses: actions/upload-artifact@v3
	with:
	name: security-reports
	path: reports/

Provide feedback