stages: [build, test, deploy]

build:
  stage: build
  image: quay.io/podman/stable
  script:
    - podman build -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA" .
    - podman login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"
    - podman push "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA"

scan:
  stage: test
  script:
    - trivy image --exit-code 1 --severity HIGH,CRITICAL \
        "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA"