⭐ Use cnspec container image

[czunker]

Signed-off-by: Christian Zunker christian@mondoo.com

[czunker]

Depends on mondoohq/cnspec#153

When the image is present and the action for docker images works, I'll extend it to the other actions.

[czunker]

@benr Could you please have a look at the failing CLA check? From what I understood it seems there is a secret missing for this repo.

[czunker]

The additional args currently do not work:
https://github.com/mondoohq/actions/actions/runs/3375902868/jobs/5603014936

[czunker]

Strangely the image scan action fails, but I cannot reproduce it locally.

[czunker]

Opened an issue for the problem: mondoohq/cnspec#157

I managed to reproduce it locally by setting all the GITHUB_ env vars and running cnspec.

[czunker]

This is a demo run of the new action in the operator repo: https://github.com/mondoohq/mondoo-operator/actions/runs/3427117500/jobs/5709741631

Just for comparison a previous run, with all the apt update steps in it: https://github.com/mondoohq/mondoo-operator/actions/runs/3414905633/jobs/5683488242

[czunker]

I had to revert the changes for the policy action, because cnspec does not know about policy.

[scottford-io]

@czunker Great work! I just noticed one more issue with the github-org and github-repo action and requested that we move from the --token arg to using the env config with GITHUB_TOKEN

Other than that, I am good to go!