Inband Docker will run alloy-inband by default #1677

	name: lint, test and build image
	on: [pull_request, push]

	jobs:
	lint-test:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- name: golangci-lint
	run: make lint

	- name: Test
	run: go test ./...
	build:
	runs-on: ubuntu-latest
	needs: [lint-test]
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- name: build binary
	run: make build-linux

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Build Alloy Docker image - no push
	id: dockerbuild-alloy
	uses: docker/build-push-action@v5
	with:
	context: .
	push: false
	tags: ghcr.io/metal-toolbox/alloy:latest
	file: Dockerfile

	- name: Scan image - Alloy
	id: scan-Alloy-image
	uses: anchore/scan-action@v3
	with:
	image: ghcr.io/metal-toolbox/alloy:latest
	acs-report-enable: true
	# TODO(joel): Fail build once we migrate off CentOS.
	fail-build: false

	- name: Inspect action SARIF report
	run: cat ${{ steps.scan.outputs.sarif }}
	# This should run even if we fail the container scan
	if: always()

Provide feedback