🌱 Bump the github-actions group across 1 directory with 10 updates #263

	name: Docker Image Scan

	on:
	pull_request:
	branches: [ main ]

	jobs:
	scan:
	name: Build and Scan
	runs-on: ubuntu-latest
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	steps:
	- name: Notify on failure
	if: failure()
	uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
	with:
	script: \|
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: '❌ Container security scan failed. Please check the workflow logs.'
	})

	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@18ce135bb5112fa8ce4ed6c17ab05699d7f3a5e0 # v3.11.0

	- name: Build local container
	uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
	with:
	tags: localbuild/testimage:latest
	push: false
	load: true

	- name: Scan image
	uses: anchore/scan-action@be7a22da4f22dde446c4c4c099887ff5b256526c # v6.3.0
	with:
	image: "localbuild/testimage:latest"
	fail-build: true
	severity-cutoff: high

Provide feedback