Separate stages

.github/workflows/docker-build.yml

@@ -64,11 +64,15 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64,linux/arm64,linux/arm/v7
 
+  docker_scan:
+      runs-on: ubuntu-latest
+      needs: docker_build
+      steps:
         - name: Docker Scout CVEs
           uses: docker/scout-action@v1
           with:
             command: cves
-          image: ${{ steps.meta.outputs.tags }}
+            image: ${{ needs.docker_build.outputs.image-tags }}
             only-severities: critical,high
             only-fixed: true
             write-comment: true

.github/workflows/docker-scan.yml

@@ -1,37 +0,0 @@
-name: Docker Scan
-
-on:
-  workflow_dispatch:
-    inputs:
-      trigger-scan:
-        description: 'Trigger a manual scan'
-        required: true
-        default: 'true'
-
-env:
-  DOCKER_IMAGE: donaldzou/wgdashboard
-
-jobs:
-  docker_scan:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-
-      - name: Docker Scout CVEs
-        uses: docker/scout-action@v1
-        with:
-          command: cves
-          image: ${{ env.DOCKER_IMAGE }}:nightly
-          only-severities: critical,high
-          only-fixed: true
-          write-comment: true
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          exit-code: true