Skip to content

Commit a36ec88

Browse files
Bouncheckavelanarius
authored andcommitted
Add daily vulnerability scan
Adds a workflow that will run trivy scanner daily at 16:44. Looks for CVEs with at least MEDIUM severity.
1 parent ffff237 commit a36ec88

File tree

1 file changed

+24
-0
lines changed

1 file changed

+24
-0
lines changed

.github/workflows/trivy.yml

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
name: Vulnerability scan
2+
3+
on:
4+
schedule:
5+
- cron: "44 16 * * *"
6+
push:
7+
pull_request:
8+
9+
jobs:
10+
build:
11+
name: Trivy fs scan
12+
runs-on: ubuntu-latest
13+
14+
steps:
15+
- uses: actions/checkout@v4
16+
- name: Run trivy in fs mode
17+
uses: aquasecurity/trivy-action@master
18+
with:
19+
scan-type: 'fs'
20+
scan-ref: '.'
21+
format: 'table'
22+
exit-code: '1'
23+
ignore-unfixed: false
24+
severity: 'CRITICAL,HIGH,MEDIUM'

0 commit comments

Comments
 (0)