chore(deps): update gradle version

.github/actions/analysis/security/action.yml

@@ -66,5 +66,5 @@ runs:
       uses: github/codeql-action/[email protected]
       with:
         sarif_file: build/reports/detekt/detekt.sarif
-        checkout_path: ${{ github.workspace }}
         token: ${{ inputs.token }}
+        category: static-code-analysis

.github/actions/docker/backend/action.yml

@@ -0,0 +1,80 @@
+name: Package and Publish Backend 📦
+description: |
+  This workflow is responsible for packaging and publishing the backend application
+  to the container registry. It also performs vulnerability scanning.
+
+inputs:
+  deliver:
+    description: 'Deliver backend to production'
+    required: true
+    default: 'true'
+  docker_username:
+    description: 'The username for Docker Hub'
+    required: true
+  docker_password:
+    description: 'The password for Docker Hub'
+    required: true
+  version:
+    description: 'The version of the backend'
+    required: true
+  ci_github_token:
+    description: 'GITHUB_TOKEN with permissions to push to the container registry'
+    required: true
+  gradle-encryption-key:
+    description: 'The encryption key to use for the gradle cache'
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Install Java Tools & Dependencies
+      uses: ./.github/actions/install/java
+      with:
+        java-version: 21
+        gradle-encription-key: ${{ inputs.gradle-encryption-key }}
+
+    - name: Cache Gradle Dependencies
+      uses: actions/cache@v3
+      with:
+        path: |
+          ~/.gradle/caches
+          ~/.gradle/wrapper
+        key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+        restore-keys: |
+          ${{ runner.os }}-gradle-
+
+    - name: Execute Gradle build
+      run: |
+        chmod +x gradlew
+        ./gradlew assemble
+        ./gradlew bootBuildImage -x test
+      shell: bash
+
+    - name: 🪄 Scan Docker images for vulnerabilities
+      uses: aquasecurity/[email protected]
+      with:
+        image-ref: ghcr.io/dallay/lyra:latest
+        format: sarif
+        output: trivy-lyra-report.sarif
+        severity: HIGH,CRITICAL
+        ignore-unfixed: true
+        cache-dir: /tmp/trivy-cache-lyra
+
+    - name: ⇪ Upload Trivy Scan Report
+      uses: actions/upload-artifact@v3
+      with:
+        name: trivy-lyra-report
+        path: trivy-lyra-report.sarif
+
+    - name: 🐳 Authenticate to Docker Hub and GHCR
+      run: |
+        echo ${{ inputs.ci_github_token }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+        echo ${{ inputs.docker_password }} | docker login docker.io -u ${{ inputs.docker_username }} --password-stdin
+      shell: bash
+
+    - name: 🐳 Push Docker image to GHCR and Docker Hub
+      if: ${{ inputs.deliver }}
+      run: |
+        docker push --all-tags ${{ inputs.docker_username }}/lyra
+        docker push --all-tags ghcr.io/dallay/lyra
+      shell: bash

.github/actions/docker/frontend/action.yml

@@ -0,0 +1,77 @@
+name: Package and Publish Frontend 📦
+description: |
+  This composite action packages and publishes the frontend application
+  (lyra-app and lyra-landing-page) to the container registry. It also performs vulnerability scanning.
+
+inputs:
+  deliver:
+    description: 'Deliver frontend to production'
+    required: true
+    default: 'true'
+  docker_username:
+    description: 'The username for Docker Hub'
+    required: true
+  docker_password:
+    description: 'The password for Docker Hub'
+    required: true
+  version:
+    description: 'The version of the frontend'
+    required: true
+  ci_github_token:
+    description: 'GITHUB_TOKEN with permissions to push to the container registry'
+    required: true
+  target:
+    description: 'The target image to build (lyra-app, lyra-landing-page)'
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Authenticate to Docker Hub and GHCR
+      run: |
+        echo ${{ inputs.ci_github_token }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+        echo ${{ inputs.docker_password }} | docker login docker.io -u ${{ inputs.docker_username }} --password-stdin
+      shell: bash
+
+    - name: Cache Docker layers
+      id: cache
+      uses: actions/cache@v3
+      with:
+        path: /tmp/.buildx-cache
+        key: ${{ runner.os }}-buildx-${{ github.sha }}
+        restore-keys: |
+          ${{ runner.os }}-buildx-
+
+    - name: Build and Push Docker images
+      uses: docker/build-push-action@v5
+      with:
+        context: .
+        platforms: linux/amd64,linux/arm64
+        target: ${{ inputs.target }}
+        push: ${{ inputs.deliver }}
+        tags: |
+          ghcr.io/dallay/${{ inputs.target }}:${{ inputs.version }},
+          ghcr.io/dallay/${{ inputs.target }}:latest,
+          docker.io/${{ inputs.target }}:${{ inputs.version }},
+          docker.io/${{ inputs.target }}:latest
+        cache-from: type=registry,ref=ghcr.io/dallay/${{ inputs.target }}:cache
+        cache-to: type=registry,ref=ghcr.io/dallay/${{ inputs.target }}:cache,mode=max
+
+    - name: 🪄 Scan Docker images for vulnerabilities
+      uses: aquasecurity/[email protected]
+      with:
+        image-ref: ghcr.io/dallay/${{ inputs.target }}:latest
+        format: sarif
+        output: trivy-${{ inputs.target }}-report.sarif
+        severity: HIGH,CRITICAL
+        ignore-unfixed: true
+        cache-dir: /tmp/trivy-cache-${{ inputs.target }}
+
+    - name: ⇪ Upload Trivy Scan Report
+      uses: actions/upload-artifact@v3
+      with:
+        name: trivy-${{ inputs.target }}-report
+        path: trivy-${{ inputs.target }}-report.sarif