Skip to content

Commit de5bc62

Browse files
authored
COH-27607 - Add nightly Trivy scan using GitHub workflow (#48)
* Add trivy scan
1 parent d09b0b4 commit de5bc62

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed

.github/workflows/trivy-scan.yml

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
# Copyright 2023 Oracle Corporation and/or its affiliates.
2+
# Licensed under the Universal Permissive License v 1.0 as shown at
3+
# https://oss.oracle.com/licenses/upl.
4+
5+
# ---------------------------------------------------------------------------
6+
# Coherence Go Client GitHub Actions Scheduled Trivy Scan
7+
# ---------------------------------------------------------------------------
8+
name: Scheduled Trivy Scan
9+
10+
on:
11+
workflow_dispatch:
12+
schedule:
13+
# Every day at midnight
14+
- cron: '0 0 * * *'
15+
16+
jobs:
17+
trivy-scan:
18+
runs-on: ubuntu-latest
19+
container:
20+
image: ghcr.io/aquasecurity/trivy:latest
21+
volumes:
22+
- /var/run/docker.sock:/var/run/docker.sock
23+
- /home/runner/work/coherence-py-client/coherence-py-client:/repo
24+
25+
steps:
26+
- uses: actions/checkout@v3
27+
28+
- name: Trivy Scan
29+
run: trivy fs --exit-code 1 /repo

0 commit comments

Comments
 (0)