From 9ce24ff32cccf3e24edb216dd7c986f5fcf1eff4 Mon Sep 17 00:00:00 2001 From: Akhil Anand Date: Tue, 10 Oct 2023 18:28:39 +0530 Subject: [PATCH] feature-5232-Trivy-Security-Scans --- .github/workflows/trivy.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/trivy.yml diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml new file mode 100644 index 0000000000..72532b4612 --- /dev/null +++ b/.github/workflows/trivy.yml @@ -0,0 +1,27 @@ +name: Trivy + +on: + pull_request: + push: + +jobs: + scan: + runs-on: ubuntu-latest + steps: + - name: Check out code + uses: actions/checkout@v3 + with: + submodules: recursive + + + - name: Build the Docker image + run: docker build . -t appwrite_image:latest + + - name: Run Trivy vulnerability scanner + uses: aquasecurity/trivy-action@master + with: + image-ref: 'appwrite_image:latest' + format: 'table' + exit-code: '1' + ignore-unfixed: 'false' + severity: 'CRITICAL,HIGH'