scan.yml

name: scan-images

on:
  schedule:
    # every Monday at 12:00AM
    - cron: "0 12 * * 1"

# Remove all permissions from GITHUB_TOKEN except metadata.
permissions: {}

jobs:
  scan:
    strategy:
      fail-fast: false
      matrix:
        branch: [ main, release-2.2, release-2.1, release-2.0 ]
    name: Trivy
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v5
        with:
          ref: ${{ matrix.branch }}
      - name: Setup go
        uses: actions/setup-go@v6
        with:
          go-version-file: '${{ github.workspace }}/go.mod'
      - name: Run verify container script
        run: make verify-container-images