Skip to content

chore(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 #164

chore(deps): bump docker/build-push-action from 5.4.0 to 6.0.0

chore(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 #164

Workflow file for this run

name: Scan container images
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
schedule:
- cron: '0 4 * * 1' # Every Monday at 9:30 IST
jobs:
build-push:
strategy:
matrix:
os: [ubuntu-latest]
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Build an image from Dockerfile
run: |
docker build -f "Dockerfile" -t prompt:${{ github.sha }} .
- name: Run Trivy vulnerability scanner
uses: aquasecurity/[email protected]
with:
image-ref: prompt:${{ github.sha }}
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'