Skip to content

Commit 1b8c36e

Browse files
build: add trivy (#194)
1 parent 8a3ef9f commit 1b8c36e

1 file changed

Lines changed: 18 additions & 0 deletions

File tree

.github/workflows/trivy.yml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: Trivy security Gate
2+
on: [push]
3+
jobs:
4+
security-gate:
5+
name: Trivy security Gate
6+
runs-on: ubuntu-latest
7+
steps:
8+
- name: Checkout code
9+
uses: actions/checkout@v2
10+
11+
- name: Run Trivy vulnerability scanner in repo mode
12+
uses: aquasecurity/trivy-action@master
13+
with:
14+
scan-type: 'fs'
15+
format: 'table'
16+
exit-code: '1'
17+
severity: 'CRITICAL'
18+
ignore-unfixed: true

0 commit comments

Comments
 (0)