feat: add checkov github workflow #194

	name: build docker image

	on:
	push:
	branches-ignore:
	- master

	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	gosec:
	runs-on: ubuntu-latest
	env:
	GO111MODULE: on
	steps:
	- name: Checkout Source
	uses: actions/checkout@v4
	- name: Run Gosec Security Scanner
	uses: securego/gosec@master
	with:
	args: ./...

	build-image:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Extract metadata (tags, labels) for Docker
	id: meta
	uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

	- name: Build docker image
	uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09
	with:
	context: .
	file: build/package/Dockerfile
	push: false
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}

Provide feedback