Skip to content
Scan Image

Create main.yml #18

Sign in to view logs

Create main.yml

Create main.yml #18

Workflow file for this run

.github/workflows/trivy.yml at 5dc72c2
---
name: Scan Image
on:
pull_request:
branches:
- main
workflow_dispatch:
jobs:
build:
name: Scan Image
runs-on: ubuntu-20.04
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Build an image from Dockerfile
run: |
docker build -t ${{ github.sha }} -f src/Dockerfile src/
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.20.0
with:
image-ref: ${{ github.sha }}
format: sarif
output: trivy-results.sarif
scanners: vuln,secret,config
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: trivy-results.sarif