DEVX-422: Закрытие CS уязвимостей на core service

.gitea/workflows/scan-backend.yml

@@ -45,32 +45,12 @@ jobs:
           ./gradlew bootJar --no-daemon -x cyclonedxBom
           echo 'Jar in libs folder'
           ls ./build/libs
-      - name: Generate Dockerfile
+      - name: Build Docker Image
-        run: |
+        uses: https://git.binom.pw/otp/devops/docker@main
-          cat > ./Dockerfile << 'EOF'
-          FROM nexus.isb/developerspace-prod-docker-hosted/java-service-image:0.1.5
-
-          COPY /build/libs/*.jar /app.jar
-
-          ENTRYPOINT ["java", "-jar", "/app.jar"]
-          EOF
-      - name: Login to Nexus
-        run: |
-          echo '${{ secrets.NEXUS_PASSWORD }}' | buildah login --tls-verify=false -u '${{ secrets.NEXUS_USERNAME }}' --password-stdin nexus.isb
-      - name: Build Image
-        uses: redhat-actions/buildah-build@v2
-        env:
-          RUNNER_OS: Linux
         with:
-          image: "otp/devspc/${{ github.event.inputs.repo_path }}"
+          image-name: "otp/devspc/${{ github.event.inputs.repo_path }}"
           tags: scan
-          containerfiles: |
+          push: false
-            ./Dockerfile
-          oci: true
-          tls-verify: false
-          context: .
-          extra-args: |
-            --retry=7
       - name: Export Image to tar
         run: |
           rm -f /tmp/image.tar