Merge pull request #177 from dabradley/personal/dabradley/trivy-on-de… #406

	name: Trivy vulnerability scanner

	# Controls when the workflow will run
	on:
	# Triggers the workflow on push or pull request events but only for the main branch
	push:
	branches: [ main, development ]
	pull_request:
	branches: [ main, development ]
	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	jobs:
	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/setup-go@v3
	with:
	go-version: '1.23'

	- name: Checkout code
	uses: actions/checkout@v4

	- name: Build an image from Dockerfile
	run: \|
	export PUBLISH=true
	export REGISTRY=test
	export IMAGE_VERSION=latest
	export DOCKER_CLI_EXPERIMENTAL=enabled
	make container

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: 'test/azurelustre-csi:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'

Provide feedback