Add pipeline for build goss docker image

[dklimpel]

Checklist

• [x] make test-all (UNIX) passes. CI will also test this
• [ ] unit and/or integration tests are included (if applicable)
• [ ] documentation is changed or added (if applicable)

Description of change

Add building own docker image and upload to ghcr.io. Realted image: https://github.com/aelsabbahy/goss-docker/blob/master/Dockerfile

Build image from

• master branch with goss version: <latest-tag>-master+<short commit sha> (semantic version)
• tag with version <tag>

Add CVE scan to github security page

Related to:

• 901

[aelsabbahy]

So is this essentially a replacement for: https://github.com/aelsabbahy/goss-docker

Btw.. many thanks for the awesome work you've submitted! These are all great improvements.

[dklimpel]

Added a small question, and might be helpful to add some documentation to this PR (can be minimal). Otherwise, it seems ready to merge

Did you mean this kind of documentation? Or something to the GH pipeline?

[aelsabbahy]

Did you mean this kind of documentation? Or something to the GH pipeline?

Yup, this looks great!

[dklimpel]

I will have a look why it is failing. I had tested it successfully.

[dklimpel]

In my repo I have not problems and it works. But I cannot see the package in goss Repo: https://github.com/orgs/goss-org/packages?repo_name=goss

Perhaps GH needs some time to activate.

[dklimpel]

It seems that permissions have to set there for the package: https://docs.github.com/en/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility

[aelsabbahy]

Yeah it's set to private, but I can't set it to public due to org settings. I'll take a look at it sometime in the next couple of days.

[aelsabbahy]

https://github.com/goss-org/goss/pkgs/container/goss

Done, was pretty simple actually.