tebarius/Docker-404-games
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

imagescan_action

Browse Source
This commit is contained in:
Martin Kayser
2025-12-13 22:31:16 +01:00
parent ac0ff6465e
commit ed4bc37f68
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
.gitea/workflows/trivy_scan_image.yml
View File

@@ -14,12 +14,17 @@ env:
user: tebarius user: tebarius
jobs: jobs:
release-image: trivy_cimage_scan:
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: aquasec/trivy:latest container: aquasec/trivy:latest
steps: steps:
- name: Scan image with trivy - name: Scan image with trivy
run: | run: |
trivy image --username ${{ env.user }} --password ${{ secrets.DOCKER_PULL_TOKEN }} --exit-code 1 \ trivy image \
--username ${{ env.user }} \
--password ${{ secrets.DOCKER_PULL_TOKEN }} \
--exit-code 1 \
--scanners vuln,misconfig,secret \ --scanners vuln,misconfig,secret \
--severity MEDIUM,HIGH,CRITICAL \
--ignore-unfixed \
${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ github.event.inputs.image_tag }} ${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ github.event.inputs.image_tag }}