docker.yml

on:
  pull_request:
    paths:
      - "Dockerfile"

permissions:
  contents: read

jobs:
  test:
    name: Build Dockerfile
    runs-on: ubuntu-latest
    steps:
      - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
        with:
          disable-sudo: true
          egress-policy: block
          allowed-endpoints: >
            9236a389bd48b984df91adc1bc924620.r2.cloudflarestorage.com:443
            auth.docker.io:443
            cgr.dev:443
            files.pythonhosted.org:443
            github.com:443
            packages.wolfi.dev:443
            production.cloudflare.docker.com:443
            pypi.org:443
            registry-1.docker.io:443
            www.python.org:443
      - name: Checkout panther-analysis
<<<<<<< HEAD
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4.1.7
=======
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b #v4.1.4
>>>>>>> 5e5f196 (Update Action versions; use SHAs (#1231))
      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 #v3.0.0
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb #v3.3.0
      - name: Build Image
        run: docker buildx build --load -f Dockerfile -t panther-analysis:latest .
      - name: Test Image
        run: |
          docker run --rm -t panther-analysis:latest pipenv run panther_analysis_tool --version