Merge pull request #79 from netbootxyz/trivy

Test trivy for PRs
This commit is contained in:
Antony Messerli 2025-02-01 18:20:38 -06:00 committed by GitHub
commit beb1ba450c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -16,4 +16,14 @@ jobs:
fetch-depth: '0' fetch-depth: '0'
- name: Build the Docker image - name: Build the Docker image
run: docker build . run: docker build -t docker-netbootxyz:${{ github.sha }} .
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@0.29.0
with:
image-ref: 'docker-netbootxyz:${{ github.sha }}'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'