ci: scan docker image on CVEs

Signed-off-by: Ilya Kheifets <[email protected]>
axoflow · Jul 9, 2024 · 21d27b6 · 21d27b6
1 parent e087d9b
commit 21d27b6
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/axosyslog-image-test.yml b/.github/workflows/axosyslog-image-test.yml
@@ -63,3 +63,11 @@ jobs:
           export SYSLOG_NG_IMAGE="axosyslog:test"
           export SYSLOG_NG_VERSION="${{ needs.tarball.outputs.snapshot-version }}"
           docker/tests/smoke.sh
+
+      - name: Scan docker image on CVEs
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'axosyslog:test'
+          format: 'table'
+          exit-code: '1'
+          severity: 'CRITICAL,HIGH,MEDIUM,LOW'