Update actions/stale action to v9 #130

	name: build and scan image (Alpine version)

	on:
	push:
	branches-ignore:
	- "master"

	env:
	IMAGE_NAME: "simaofsilva/noip-renewer"
	PIP_VERSION: "23.3.1" # renovate: datasource=pypi depName=pip versioning=pep440

	jobs:
	build_alpine:
	runs-on: ubuntu-latest
	steps:
	- name: Set up QEMU
	uses: docker/[email protected]

	- name: Set up Docker Buildx
	uses: docker/[email protected]

	- name: Checkout
	uses: actions/[email protected]

	- name: Build image for tests
	uses: docker/[email protected]
	with:
	context: .
	platforms: linux/amd64
	load: true
	tags: ${{ env.IMAGE_NAME }}:test-alpine
	file: Dockerfile
	build-args: \|
	PIP_VERSION=${{ env.PIP_VERSION }}

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: ${{ env.IMAGE_NAME }}:test-alpine
	format: "table"
	exit-code: "1"
	ignore-unfixed: true
	vuln-type: "os,library"
	severity: "MEDIUM,HIGH,CRITICAL"
	skip-files: "/usr/bin/geckodriver,/usr/local/bin/geckodriver"

	# On hold until https://github.com/aquasecurity/trivy-action/issues/228 is fixed
	# - name: Upload Trivy scan results to GitHub Security
	# uses: github/codeql-action/upload-sarif@v2
	# if: always()
	# with:
	# # Path to SARIF file relative to the root of the repository
	# sarif_file: trivy-alpine-image-scan.sarif
	# # Optional category for the results
	# # Used to differentiate multiple results for one commit
	# category: alpine-image-scan

Provide feedback