validate-image.yaml

name: Validate Docker Image
on:
  workflow_dispatch:
    inputs:
      failure_severity:
        description: 'Must be one of CRITICAL, HIGH, MEDIUM'
        required: false
        default: 'HIGH'
      fail_on_error:
        description: 'If true, will fail the build if vulnerabilities are found'
        required: true
        type: boolean
        default: true
  schedule:
    - cron: '0 20 * * *' #every day at 20:00

jobs:
  build-publish-docker-default:
    uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-validate-image.yaml@v2.3.6
    with: 
      failure_severity: ${{ inputs.failure_severity || 'HIGH'}}
      fail_on_error: ${{ inputs.fail_on_error || true }}
      cloud_provider: 'default'
      java_version: '17'
      skip_tests: true
    secrets: inherit
  build-publish-docker-aws:
    uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-validate-image.yaml@v2.3.6
    with: 
      failure_severity: ${{ inputs.failure_severity || 'HIGH'}}
      fail_on_error: ${{ inputs.fail_on_error || true }}
      cloud_provider: 'aws'
      java_version: '17'
      skip_tests: true
    secrets: inherit
    needs: [build-publish-docker-default]
  build-publish-docker-gcp:
    uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-validate-image.yaml@v2.3.6
    with: 
      failure_severity: ${{ inputs.failure_severity || 'HIGH'}}
      fail_on_error: ${{ inputs.fail_on_error || true }}
      cloud_provider: 'gcp'
      java_version: '17'
      skip_tests: true
    secrets: inherit
    needs: [build-publish-docker-aws]