Scan Docker image with Trivy

Author: jsgiraldoh28

.github/workflows/maven.yml

@@ -45,6 +45,15 @@ jobs:
     - name: Build Docker image
       run: docker build -f dockerfile/Dockerfile -t my-app-image:${{ github.sha }} dockerfile/
 
+    - name: Scan Docker image with Trivy
+      uses: aquasecurity/trivy-action@v0.28.0
+      with:
+        image-ref: my-app-image:${{ github.sha }}
+        format: table
+        severity: CRITICAL,HIGH
+        exit-code: 1
+        vuln-type: os,library
+
     - name: Run Docker container
       run: |
         # arranca en background y asigna nombre para poder pararlo después