[DSEC-907] Notify AppSec team when Trivy action fails #18

	name: 'Agora Docker build (no push)'

	on:
	workflow_dispatch:
	merge_group:
	pull_request:

	jobs:
	build-and-test:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v3
	- name: Git secrets setup
	run: \|
	git clone https://github.com/awslabs/git-secrets.git ~/git-secrets
	cd ~/git-secrets
	git checkout ad82d68ee924906a0401dfd48de5057731a9bc84
	sudo make install
	shell: bash
	- name: Secrets check
	run: \|
	sudo ln -s "$(which echo)" /usr/local/bin/say
	./minnie-kenny.sh --force
	git secrets --scan-history
	shell: bash
	- name: Setup JDK
	uses: actions/setup-java@v4
	with:
	distribution: temurin
	java-version: 11

	- name: Build image
	run: \|
	docker build -t agora .

Provide feedback