Merge pull request #174 from dalaoqi/ci/add-grype-security-scan

Ci/add grype security scan

Author: ianchen0119

.github/workflows/go.yml

@@ -25,3 +25,29 @@ jobs:
 
     - name: Test
       run: go test -v ./...
+
+    - name: Install Syft
+      run: |
+        curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
+
+    - name: Generate SBOM
+      run: |
+        syft . -o table=sbom-table.txt
+
+    - name: Install Grype
+      run: |
+        curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
+
+    - name: Run Grype vulnerability scan
+      run: |
+        grype . --output table --file grype-report.txt
+    
+    - name: Upload Security Reports
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: security-reports-${{ github.sha }}
+        path: |
+          sbom-table.txt
+          grype-report.*
+        retention-days: 10