ci-app-vulnerability-scans.yml

name: CI Vulnerability Scans

on:
  push:
    branches:
      - main
    paths:
      - app/**
      - .grype.yml
      - .hadolint.yaml
      - .trivyignore
      - .github/workflows/ci-app-vulnerability-scans.yml
  pull_request:
    paths:
      - app/**
      - .grype.yml
      - .hadolint.yaml
      - .trivyignore
      - .github/workflows/ci-app-vulnerability-scans.yml

jobs:
  vulnerability-scans:
    name: Vulnerability Scans
    uses: ./.github/workflows/vulnerability-scans.yml
    with:
      app_name: "app"