Ignore advisories from GHSA that are withdrawn. #183

	name: Publish Docker image

	on:
	push:
	branches:
	- develop

	pull_request:
	branches:
	- develop

	env:
	IMAGE_NAME: fasten.security.develop

	jobs:

	# Push image to GitHub Packages.
	# See also https://docs.docker.com/docker-hub/builds/
	push:

	runs-on: ubuntu-18.04
	if: github.event_name == 'push'

	steps:
	- name: Checkout repo
	uses: actions/checkout@v2
	- name: Setup JDK 11
	uses: actions/setup-java@v1
	with:
	java-version: 1.11
	- name: Build jar
	run: mvn clean install
	- name: Build image
	run: docker build . -f Dockerfile -t fasten.security.develop
	- name: Log into registry
	run: echo "${{ secrets.GITHUB_TOKEN }}" \| docker login docker.pkg.github.com -u ${{ github.actor }} --password-stdin
	- name: Push image
	run: \|
	IMAGE_ID=docker.pkg.github.com/${{ github.repository }}/$IMAGE_NAME

	# Change all uppercase to lowercase
	IMAGE_ID=$(echo $IMAGE_ID \| tr '[A-Z]' '[a-z]')

	# Strip git ref prefix from version
	VERSION=$(echo "${{ github.ref }}" \| sed -e 's,./$.$,\1,')

	# Strip "v" prefix from tag name
	[[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION \| sed -e 's/^v//')

	# Use Docker `latest` tag convention
	[ "$VERSION" == "develop" ] && VERSION=${GITHUB_SHA::8}
	echo IMAGE_ID=$IMAGE_ID
	echo VERSION=$VERSION

	# Push images
	docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
	docker push $IMAGE_ID:$VERSION
	docker tag $IMAGE_NAME $IMAGE_ID:latest
	docker push $IMAGE_ID:latest

Provide feedback