imagescan_action

.gitea/workflows/trivy_scan_image.yml

@@ -14,12 +14,17 @@ env:
   user: tebarius
 
 jobs:
-  release-image:
+  trivy_cimage_scan:
     runs-on: ubuntu-latest
     container: aquasec/trivy:latest
     steps:
       - name: Scan image with trivy
         run: |
-          trivy image --username ${{ env.user }} --password ${{ secrets.DOCKER_PULL_TOKEN }} --exit-code 1 \
+          trivy image \
+          --username ${{ env.user }} \
+          --password ${{ secrets.DOCKER_PULL_TOKEN }} \
+          --exit-code 1 \
           --scanners vuln,misconfig,secret \
+          --severity MEDIUM,HIGH,CRITICAL \
+          --ignore-unfixed \
           ${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ github.event.inputs.image_tag }}