scan

feat: add build only on main, addest rust to descr #230

	# NOTE refs
	# - https://github.com/aquasecurity/trivy-action#using-trivy-to-scan-your-private-registry

	name: scan
	on:
	push:
	branches:
	- main
	schedule:
	- cron: "0 0 * * MON"
	workflow_dispatch: {}
	permissions:
	contents: read
	security-events: write
	concurrency:
	group: ${{ github.run_id }}
	cancel-in-progress: false
	jobs:
	prepare:
	runs-on: ubuntu-latest
	outputs:
	matrix: ${{ steps.set.outputs.matrix }}
	steps:
	- uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
	- id: set
	run: \|
	echo "matrix=$(jq -r -c '.sync as $sync \| .build as $build \| {"include":[{"destination": $sync[].destination}, {"destination": $build[].destination}]}' <<< "$(yq e . -o json config.yaml)")" >> $GITHUB_OUTPUT
	- name: check output
	run: \|
	jq . <<< '${{ steps.set.outputs.matrix }}'
	scan:
	if: ${{ fromJSON(needs.prepare.outputs.matrix) != null }}
	needs: prepare
	strategy:
	fail-fast: false
	matrix: ${{ fromJSON(needs.prepare.outputs.matrix) }}
	uses: GeoNet/Actions/.github/workflows/reusable-container-image-scan.yml@main
	with:
	imageRefs: ${{ fromJSON(toJSON(matrix)).destination }}

Provide feedback