Skip to content

Commit c35aee9

Browse files
committed
🎨 Update
1 parent 6823b44 commit c35aee9

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

.github/workflows/build.yaml

+10
Original file line numberDiff line numberDiff line change
@@ -77,3 +77,13 @@ jobs:
7777
tags: ghcr.io/${{ github.repository_owner }}/snipbox:${{ env.COMMIT_SHORT_SHA }},ghcr.io/${{ github.repository_owner }}/snipbox:latest
7878
cache-from: type=gha
7979
cache-to: type=gha,mode=max
80+
81+
- name: Run Trivy vulnerability scanner
82+
uses: aquasecurity/[email protected]
83+
with:
84+
image-ref: 'ghcr.io/${{ github.repository_owner }}/snipbox:latest'
85+
format: 'table'
86+
exit-code: '1'
87+
ignore-unfixed: true
88+
vuln-type: 'os,library'
89+
severity: 'CRITICAL,HIGH'

0 commit comments

Comments
 (0)