File tree 1 file changed +25
-4
lines changed
1 file changed +25
-4
lines changed Original file line number Diff line number Diff line change 1
1
name : Trivy Nightly Docker Scan
2
2
3
3
on :
4
- # TODO@jsjoeio do some nightly check
4
+ # Run scans if the workflow is modified, in order to test the
5
+ # workflow itself. This results in some spurious notifications,
6
+ # but seems okay for testing.
7
+ pull_request :
8
+ branches :
9
+ - main
10
+ paths :
11
+ - .github/workflows/trivy-docker.yaml
12
+
13
+ # Run scans against master whenever changes are merged.
14
+ push :
15
+ branches :
16
+ - main
17
+ paths :
18
+ - .github/workflows/trivy-docker.yaml
19
+
20
+ schedule :
21
+ # Run at 10:15 am UTC (3:15am PT/5:15am CT)
22
+ # Run at 0 minutes 0 hours of every day.
23
+ - cron : " 15 10 * * *"
24
+
25
+ workflow_dispatch :
5
26
6
27
permissions :
7
28
actions : none
@@ -30,13 +51,13 @@ jobs:
30
51
- name : Run Trivy vulnerability scanner in image mode
31
52
uses : aquasecurity/trivy-action@296212627a1e693efa09c00adc3e03b2ba8edf18
32
53
with :
33
- image-ref : ' docker.io/codercom/code-server:latest
54
+ image-ref : " docker.io/codercom/code-server:latest"
34
55
ignore-unfixed : true
35
- format: ' sarif'
56
+ format : " sarif"
36
57
output : " trivy-image-results.sarif"
37
58
severity : " HIGH,CRITICAL"
38
59
39
60
- name : Upload Trivy scan results to GitHub Security tab
40
61
uses : github/codeql-action/upload-sarif@v1
41
62
with :
42
- sarif_file : " trivy-image-results.sarif"
63
+ sarif_file : " trivy-image-results.sarif"
You can’t perform that action at this time.
0 commit comments