We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d259e06 commit 100f4c9Copy full SHA for 100f4c9
M1-4-2-CI-Practice/README.md
@@ -10,7 +10,7 @@ Create a GitHub Actions pipeline that runs on commit to a feature branch (i.e. n
10
- Check for hardcoded secrets (`gitleaks`) - not just our app but the whole repository.
11
- SAST - SonarCloud; Review code smells and security issues
12
- SCA - Snyk; review security issues
13
-- Build a Docker image
+- Build a Docker image. Use Git commit SHA as an Image tag.
14
- Scan the built image with `Trivy`
15
- Push the built image to your Docker HUB account
16
0 commit comments