@@ -93,19 +93,18 @@ jobs:
9393 - name : Run tests
9494 run : echo "Running tests..."
9595
96- - name : Build final
97- id : build-final
96+ - name : Build for scout
97+ id : build-for-scout
9898 uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
9999 with :
100100 context : ./nestjs-project
101101 file : ./nestjs-project/Dockerfile.prod
102- push : ${{ github.event_name != 'pull_request' }}
102+ push : false
103+ load : true
103104 tags : ${{ steps.meta.outputs.tags }}
104105 labels : ${{ steps.meta.outputs.labels }}
105106 cache-from : type=gha
106107 cache-to : type=gha,mode=max
107- provenance : mode=max
108- sbom : true
109108 secrets : |
110109 github_token=${{ secrets.GITHUB_TOKEN }}
111110
@@ -121,7 +120,22 @@ jobs:
121120 ignore-unchanged : true
122121 only-severities : critical,high
123122 github-token : ${{ secrets.GITHUB_TOKEN }}
124-
123+
124+ - name : Build final
125+ id : build-final
126+ uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
127+ with :
128+ context : ./nestjs-project
129+ file : ./nestjs-project/Dockerfile.prod
130+ push : ${{ github.event_name != 'pull_request' }}
131+ tags : ${{ steps.meta.outputs.tags }}
132+ labels : ${{ steps.meta.outputs.labels }}
133+ cache-from : type=gha
134+ cache-to : type=gha,mode=max
135+ provenance : mode=max
136+ sbom : true
137+ secrets : |
138+ github_token=${{ secrets.GITHUB_TOKEN }}
125139
126140 # Sign the resulting Docker image digest except on PRs.
127141 # This will only write to the public Rekor transparency log when the Docker
0 commit comments