1
0
Fork 0
mirror of synced 2024-06-13 16:24:47 +12:00
This commit is contained in:
Akhil Anand 2024-05-16 08:54:29 -07:00 committed by GitHub
commit 11de5ce5cd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

26
.github/workflows/trivy.yml vendored Normal file
View file

@ -0,0 +1,26 @@
name: Trivy
on:
pull_request:
push:
jobs:
scan:
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v3
with:
submodules: recursive
- name: Build the Docker image
run: docker build . -t appwrite_image:latest
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'appwrite_image:latest'
format: 'table'
exit-code: '1'
ignore-unfixed: 'false'
severity: 'CRITICAL,HIGH'