image-scan for all build-platforms

agt-get upgrade in Dockerfile

.gitea/workflows/trivy_image_scan.yml

@@ -22,11 +22,23 @@ jobs:
     runs-on: ubuntu-latest
     container: aquasec/trivy:latest
     steps:
-      - name: Scan image with trivy
+      - name: Scan linux/amd64-image
+        run: |
+          trivy image \
+          --exit-code 1 \
+          --scanners vuln,misconfig,secret \
+          --severity HIGH,CRITICAL \
+          --ignore-unfixed \
+          --platform linux/amd64 \
+          ${{ env.registry_gitea }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}
+      - name: Scan linux/arm64-image
         run: |
           trivy image \
           --exit-code 1 \
           --scanners vuln,misconfig,secret \
           --severity MEDIUM,HIGH,CRITICAL \
           --ignore-unfixed \
+          --platform linux/arm64 \
           ${{ env.registry_gitea }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}
+
+,

Dockerfile

@@ -7,8 +7,8 @@ LABEL description="tebarius Mysteryhelfer web"
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
 
-
 RUN apt-get update \
+    && apt-get upgrade -y \
     && apt-get install -y --no-install-recommends curl \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*