Container App Deploy

To build and push multi-arch container images, this workflow uses docker buildx to automate the process, applying preflight validation and vulnerability scanning before pushing the verified image to your target registry.

Scanning container images for vulnerabilities before pushing is handled by integrating automated security scans into the build pipeline, ensuring image verification and preflight checks pass before registry deployment.

Yes, you can use podman or buildah as alternatives to docker. The workflow detects available container tooling automatically and applies the appropriate Dockerfile or Buildah workflow to build and push your image.

A multi-arch build with docker buildx works by compiling container images for multiple system architectures simultaneously, ensuring your application can deploy across different hardware platforms before pushing to the registry.

You need docker buildx specifically for multi-arch builds, though standard builds can use docker, podman, or buildah. The process detects your available tooling and uses buildx to enable cross-platform image creation.

Preflight checks fail when building a container image if the application source validation detects missing dependencies or configuration errors, stopping the build process to prevent pushing a broken or vulnerable image to the registry.