Remove old grype version within image scan.

.gitea/workflows/release.yml

@@ -5,7 +5,7 @@ on:
     branches: [ master ]
   schedule:
     # Run every Sunday at midnight
-    - cron: '0 0 * * 0'
+    - cron: '1 0 * * 0'
 
 env:
   IMAGE: /ri-st/startup
@@ -21,6 +21,9 @@ jobs:
     steps:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v2
+        with:
+          buildkitd-flags: '--allow-insecure-entitlement network.host'
+          driver-opts: network=host
 
       - name: Login to Docker Hub
         uses: docker/login-action@v3
@@ -49,10 +52,12 @@ jobs:
           images: ${{ secrets.REGISTRY_URL }}${{ env.IMAGE }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         env:
           ACTIONS_RUNTIME_TOKEN: ''
         with:
+          allow: network.host
+          network: host
           tags: ${{ vars.LOCAL_REGISTRY_URL }}${{ env.IMAGE }}:latest
           push: true
           
@@ -66,7 +71,6 @@ jobs:
           severity-cutoff: critical
           registry-username: ${{ vars.LOCAL_REGISTRY_USER }}
           registry-password: ${{ vars.LOCAL_REGISTRY_PASS }}
-          grype-version: 'v0.90.0'
       
       - name: Inspect file
         run: cat ${{ steps.scan.outputs.table }}

Dockerfile

@@ -7,7 +7,7 @@ RUN composer install --no-dev --no-scripts --ignore-platform-reqs
 RUN composer dumpautoload --optimize
 
 #Use prebuilt image
-FROM cs-git.ddnss.de/docker/nginx-fpm-8-4:latest AS final
+FROM gitea.fam-steinle.de/docker/nginx-fpm-8-4:latest AS final
 WORKDIR /var/www/html
 USER root
 COPY --from=composer-build /var/www/html /var/www/html