Fix build containers workflow - update Go version, dependencies, and triggers

[Copilot]

Overview

This PR fixes critical issues in the build containers workflow that were preventing successful Docker image builds for both backend and frontend components.

Issues Fixed

Backend Build Failure

The backend Docker build was failing with:

go: go.mod requires go >= 1.24 (running go 1.23.12; GOTOOLCHAIN=local)

Root Cause: The backend/Dockerfile was using golang:1.23-alpine while go.mod requires Go 1.24.

Fix: Updated Dockerfile to use golang:1.24-alpine to match the project requirements.

Frontend Build Failure

The frontend Docker build was failing with:

sh: vite: not found

Root Cause: The frontend Dockerfile was using npm ci --only=production which excludes dev dependencies like vite that are required for the build process.

Fix: Changed to npm ci without the production flag to install all dependencies including dev dependencies needed for building.

Workflow Trigger Issues

The build containers workflow was not automatically triggering after merging version bump PRs.

Fix: Enhanced the workflow with multiple trigger mechanisms:

• Retained original release: [published] trigger
• Added push trigger for version file changes (VERSION, package.json, go.mod)
• Added workflow_run trigger as backup when release workflow completes
• Added condition to skip failed workflow runs

Trivy Security Scanner

The Trivy vulnerability scanner was causing workflow failures when SARIF upload couldn't find the results file.

Fix: Made SARIF upload conditional with if: always() && hashFiles('trivy-results.sarif') != ''

Technical Changes

• backend/Dockerfile: Updated base image from golang:1.23-alpine to golang:1.24-alpine
• frontend/Dockerfile: Removed --only=production flag from npm ci command
• .github/workflows/build-containers.yml:
  • Added multiple trigger mechanisms for better reliability
  • Fixed Trivy SARIF upload condition
  • Enhanced build date handling with better fallbacks
  • Added workflow success conditions

Testing

✅ Backend builds successfully with Go 1.24
✅ Frontend builds successfully with full dependency installation
✅ All workflow triggers are properly configured
✅ Consistent Go version across all workflows (CI, release, build-containers)

The workflow will now automatically trigger on both new releases and version bump PR merges, ensuring container images are built and published correctly.

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.