Separate stages

.github/workflows/docker-build.yml

@@ -64,23 +64,27 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64,linux/arm64,linux/arm/v7
 
-      - name: Docker Scout CVEs
-        uses: docker/scout-action@v1
-        with:
-          command: cves
-          image: ${{ steps.meta.outputs.tags }}
-          only-severities: critical,high
-          only-fixed: true
-          write-comment: true
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          exit-code: true
+  docker_scan:
+      runs-on: ubuntu-latest
+      needs: docker_build
+      steps:
+        - name: Docker Scout CVEs
+          uses: docker/scout-action@v1
+          with:
+            command: cves
+            image: ${{ needs.docker_build.outputs.image-tags }}
+            only-severities: critical,high
+            only-fixed: true
+            write-comment: true
+            github-token: ${{ secrets.GITHUB_TOKEN }}
+            exit-code: true
 
-      - name: Docker Scout Compare
-        uses: docker/scout-action@v1
-        with:
-          command: compare
-          image: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:nightly
-          to: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:latest
-          only-severities: critical,high
-          ignore-unchanged: true
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+        - name: Docker Scout Compare
+          uses: docker/scout-action@v1
+          with:
+            command: compare
+            image: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:nightly
+            to: ${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}:latest
+            only-severities: critical,high
+            ignore-unchanged: true
+            github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docker-scan.yml

@@ -1,37 +0,0 @@
-name: Docker Scan
-
-on:
-  workflow_dispatch:
-    inputs:
-      trigger-scan:
-        description: 'Trigger a manual scan'
-        required: true
-        default: 'true'
-
-env:
-  DOCKER_IMAGE: donaldzou/wgdashboard
-
-jobs:
-  docker_scan:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-
-      - name: Docker Scout CVEs
-        uses: docker/scout-action@v1
-        with:
-          command: cves
-          image: ${{ env.DOCKER_IMAGE }}:nightly
-          only-severities: critical,high
-          only-fixed: true
-          write-comment: true
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          exit-code: true