From c497b4e9368a848c3e4f7c0715747fb1126a5f47 Mon Sep 17 00:00:00 2001
From: Senan Jude <senanjude@Senans-MacBook-Pro.local>
Date: Wed, 20 Jul 2022 09:38:40 +0530
Subject: [PATCH] added container scanning to attribute-service repo

---
 .github/workflows/pr-build.yml     | 12 ++++++++++++
 attribute-service/build.gradle.kts |  4 ++--
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml
index 3c1b0744..24017c5e 100644
--- a/.github/workflows/pr-build.yml
+++ b/.github/workflows/pr-build.yml
@@ -42,6 +42,18 @@ jobs:
         with: 
           args: build dockerBuildImages
 
+      - name: Determine docker tag
+        id: tag
+        run: echo ::set-output name=tag::$(./gradlew -q printDockerImageDefaultTag | head -1)
+
+      - name: Scan docker image
+        uses: azure/container-scan@v0.1
+        with:
+          image-name: hypertrace/attribute-service:${{ steps.tag.outputs.tag }}
+        env:
+          DOCKLE_HOST: "unix:///var/run/docker.sock"
+        continue-on-error: true
+
   validate-helm-charts:
     runs-on: ubuntu-20.04
     steps:
diff --git a/attribute-service/build.gradle.kts b/attribute-service/build.gradle.kts
index 80bafaa9..c236cd70 100644
--- a/attribute-service/build.gradle.kts
+++ b/attribute-service/build.gradle.kts
@@ -9,8 +9,8 @@ plugins {
   java
   application
   jacoco
-  id("org.hypertrace.docker-java-application-plugin") version "0.9.0"
-  id("org.hypertrace.docker-publish-plugin") version "0.9.0"
+  id("org.hypertrace.docker-java-application-plugin") version "0.9.4"
+  id("org.hypertrace.docker-publish-plugin") version "0.9.4"
   id("org.hypertrace.integration-test-plugin")
   id("org.hypertrace.jacoco-report-plugin")
 }