ci-image-scanning-on-pull-request.yaml

name: image-scanning
on:
  pull_request:
jobs:
  use-trivy-to-scan-image:
    name: image scannning
    # prevent job running from forked repository
    if: ${{ github.repository == 'karmada-io/karmada' }}
    runs-on: ubuntu-22.04
    steps:
      - name: checkout code
        uses: actions/checkout@v3
      - name: install Go
        uses: actions/setup-go@v3
        with:
          go-version: 1.20.11
      - name: Image scan
        run: |
          hack/vuln-scan-local.sh false