added container scanning to attribute-service repo (#132)

Co-authored-by: Senan Jude <[email protected]>

.github/workflows/pr-build.yml

@@ -42,6 +42,18 @@ jobs:
         with: 
           args: build dockerBuildImages
 
+      - name: Determine docker tag
+        id: tag
+        run: echo ::set-output name=tag::$(./gradlew -q printDockerImageDefaultTag | head -1)
+
+      - name: Scan docker image
+        uses: azure/[email protected]
+        with:
+          image-name: hypertrace/attribute-service:${{ steps.tag.outputs.tag }}
+        env:
+          DOCKLE_HOST: "unix:///var/run/docker.sock"
+        continue-on-error: true
+
   validate-helm-charts:
     runs-on: ubuntu-20.04
     steps:

attribute-service/build.gradle.kts

@@ -9,8 +9,8 @@ plugins {
   java
   application
   jacoco
-  id("org.hypertrace.docker-java-application-plugin") version "0.9.0"
-  id("org.hypertrace.docker-publish-plugin") version "0.9.0"
+  id("org.hypertrace.docker-java-application-plugin") version "0.9.4"
+  id("org.hypertrace.docker-publish-plugin") version "0.9.4"
   id("org.hypertrace.integration-test-plugin")
   id("org.hypertrace.jacoco-report-plugin")
 }