Skip to content

Commit cfb8486

Browse files
authored
Merge pull request #89 from regulaforensics/sp-9923-repo-scan
Sp 9923 repo scan
2 parents 8400d29 + 658db5b commit cfb8486

File tree

1 file changed

+24
-0
lines changed

1 file changed

+24
-0
lines changed

.github/workflows/trivy-scan.yaml

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
name: Trivy Scan
2+
3+
on:
4+
pull_request:
5+
branches:
6+
- main
7+
- master
8+
- develop
9+
10+
jobs:
11+
trivy-scan:
12+
name: Scanner
13+
runs-on: ubuntu-latest
14+
steps:
15+
- name: Checkout code
16+
uses: actions/checkout@v3
17+
18+
- name: Run Trivy vulnerability scanner in fs mode
19+
uses: aquasecurity/trivy-action@master
20+
with:
21+
scan-type: 'fs'
22+
exit-code: '1'
23+
ignore-unfixed: true
24+
severity: 'CRITICAL,HIGH,MEDIUM,LOW'

0 commit comments

Comments
 (0)