CI: Add trivy support

Signed-off-by: Mario Trangoni <[email protected]>
mjtrangoni · Aug 12, 2024 · ac1e44f · ac1e44f
1 parent 36a2dd6
commit ac1e44f
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -100,6 +100,19 @@ jobs:
           else
             docker push $DOCKER_IMAGE_NAME:$CIRCLE_BRANCH
           fi
+    - run:
+        name: Install trivy
+        command: |
+          apk add --update-cache --upgrade curl
+          curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
+    - run:
+        name: Scan the local image with trivy
+        command: |
+          if [ -n "$CIRCLE_TAG" ]; then
+            trivy image --exit-code 0 --no-progress $DOCKER_IMAGE_NAME:latest
+          else
+            trivy image --exit-code 0 --no-progress docker push $DOCKER_IMAGE_NAME:$CIRCLE_BRANCH
+          fi
 
   release:
     executor: golang