github action + minor refactor

This commit is contained in:
mkelcik
2023-04-29 12:56:19 +02:00
parent 3921b648ce
commit 07bd5c8287
2 changed files with 50 additions and 31 deletions

View File

@@ -76,3 +76,22 @@ jobs:
echo "Failed"
exit 1
fi
build:
name: Image vulnerability scanner
needs: [docker-lint, golangci]
runs-on: ubuntu-20.04
steps:
- name: Checkout code
uses: actions/checkout@v3
- name: Build an image from Dockerfile
run: |
docker build -t docker.io/my-organization/my-app:${{ github.sha }} .
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'