Workflow adjustments:

- Paths ignore for all docker build
- Remove security workflow (CVEs should be fixed by Alpine)

.github/workflows/build.yml

@@ -2,6 +2,28 @@ name: Docker build
 on:
   pull_request:
     branches: [master]
+    paths-ignore:
+      - .devcontainer
+      - .github/ISSUE_TEMPLATE
+      - .github/workflows/buildx-release.yml
+      - .github/workflows/buildx-branch.yml
+      - .github/workflows/buildx-latest.yml
+      - .github/workflows/dockerhub-description.yml
+      - .github/workflows/labels.yml
+      - .github/workflows/misspell.yml
+      - .github/CODEOWNERS
+      - .github/CONTRIBUTING.md
+      - .github/FUNDING.yml
+      - .github/labels.yml
+      - .vscode
+      - cmd/ovpnparser
+      - cmd/resolver
+      - doc
+      - .gitignore
+      - docker-compose.yml
+      - LICENSE
+      - README.md
+      - title.svg
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/buildx-branch.yml

@@ -6,13 +6,22 @@ on:
       - '*/*'
       - '!master'
     paths-ignore:
+      - .devcontainer
+      - .github/ISSUE_TEMPLATE
+      - .github/workflows/build.yml
       - .github/workflows/buildx-release.yml
+      - .github/workflows/buildx-latest.yml
       - .github/workflows/dockerhub-description.yml
-      - .github/workflows/greetings.yml
       - .github/workflows/labels.yml
       - .github/workflows/misspell.yml
-      - .github/workflows/security.yml
+      - .github/CODEOWNERS
-      - .dockerignore
+      - .github/CONTRIBUTING.md
+      - .github/FUNDING.yml
+      - .github/labels.yml
+      - .vscode
+      - cmd/ovpnparser
+      - cmd/resolver
+      - doc
       - .gitignore
       - docker-compose.yml
       - LICENSE

.github/workflows/buildx-latest.yml

@@ -3,13 +3,22 @@ on:
   push:
     branches: [master]
     paths-ignore:
+      - .devcontainer
+      - .github/ISSUE_TEMPLATE
+      - .github/workflows/build.yml
+      - .github/workflows/buildx-branch.yml
       - .github/workflows/buildx-release.yml
       - .github/workflows/dockerhub-description.yml
-      - .github/workflows/greetings.yml
       - .github/workflows/labels.yml
       - .github/workflows/misspell.yml
-      - .github/workflows/security.yml
+      - .github/CODEOWNERS
-      - .dockerignore
+      - .github/CONTRIBUTING.md
+      - .github/FUNDING.yml
+      - .github/labels.yml
+      - .vscode
+      - cmd/ovpnparser
+      - cmd/resolver
+      - doc
       - .gitignore
       - docker-compose.yml
       - LICENSE

.github/workflows/buildx-release.yml

@@ -3,13 +3,22 @@ on:
   release:
     types: [published]
     paths-ignore:
+      - .devcontainer
+      - .github/ISSUE_TEMPLATE
+      - .github/workflows/build.yml
+      - .github/workflows/buildx-branch.yml
       - .github/workflows/buildx-latest.yml
       - .github/workflows/dockerhub-description.yml
-      - .github/workflows/greetings.yml
       - .github/workflows/labels.yml
       - .github/workflows/misspell.yml
-      - .github/workflows/security.yml
+      - .github/CODEOWNERS
-      - .dockerignore
+      - .github/CONTRIBUTING.md
+      - .github/FUNDING.yml
+      - .github/labels.yml
+      - .vscode
+      - cmd/ovpnparser
+      - cmd/resolver
+      - doc
       - .gitignore
       - docker-compose.yml
       - LICENSE

.github/workflows/security.yml

@@ -1,44 +0,0 @@
-name: Security scan of Docker image
-on:
-  push:
-    branches: [master]
-    paths-ignore:
-      - .github/workflows/buildx-release.yml
-      - .github/workflows/dockerhub-description.yml
-      - .github/workflows/greetings.yml
-      - .github/workflows/labels.yml
-      - .github/workflows/misspell.yml
-      - .github/workflows/security.yml
-      - .dockerignore
-      - .gitignore
-      - docker-compose.yml
-      - LICENSE
-      - README.md
-      - title.svg
-  schedule:
-    - cron: '0 9 * * *'
-jobs:
-  security-analysis:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v2
-      - name: Check for scratch
-        id: scratchCheck
-        run: echo ::set-output name=scratch::$(cat Dockerfile | grep 'FROM scratch')
-      - name: Build image
-        if: steps.scratchCheck.outputs.scratch == ''
-        run: docker build -t image .
-      - name: Phonito
-        if: steps.scratchCheck.outputs.scratch == ''
-        uses: phonito/phonito-scanner-action@master
-        with:
-          image: image
-          fail-level: LOW
-          phonito-token: ${{ secrets.PHONITO_TOKEN }}
-      - name: Trivy
-        if: steps.scratchCheck.outputs.scratch == ''
-        uses: homoluctus/gitrivy@v1.0.0
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          image: image