Add Docker checks to GitHub Actions.

.github/workflows/branch.yml

@@ -31,3 +31,26 @@ jobs:
           bundler-cache: true
       - name: Run tests
         run: bundle exec rspec
+
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Build the image
+        uses: docker/build-push-action@v5
+        with:
+          push: false
+          context: .
+      - name: Scan the image
+        uses: docker/scout-action@v1
+        with:
+          command: cves
+#          only-fixed: true
+          only-severities: critical,high
+          write-comment: true

docker-compose.yaml

@@ -1,5 +1,5 @@
 services:
-  web:
+  api:
     build: .
     volumes:
       - .:/opt/app