mirror of
https://github.com/tommytran732/Synapse-Docker
synced 2024-11-09 11:21:32 -05:00
Scan with Trivy on build
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
4a3d3af9f8
commit
a9c898a6cb
15
.github/workflows/build.yml
vendored
15
.github/workflows/build.yml
vendored
@ -74,3 +74,18 @@ jobs:
|
||||
env:
|
||||
COSIGN_EXPERIMENTAL: "true"
|
||||
TAGS: ${{ steps.meta.outputs.tags }}
|
||||
|
||||
- name: Run Trivy vulnerability scanner
|
||||
uses: aquasecurity/trivy-action@master
|
||||
with:
|
||||
image-ref: 'ghcr.io/tommytran732/synapse'
|
||||
format: 'template'
|
||||
template: '@/contrib/sarif.tpl'
|
||||
output: 'trivy-results.sarif'
|
||||
severity: 'CRITICAL,HIGH'
|
||||
vuln-type: "os"
|
||||
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@v2
|
||||
with:
|
||||
sarif_file: 'trivy-results.sarif'
|
||||
|
Loading…
Reference in New Issue
Block a user