From 71a80807cd6d80bd30af0ad44d7d8964cfd91387 Mon Sep 17 00:00:00 2001 From: Joel Wembo Date: Wed, 17 Apr 2024 18:09:49 +0800 Subject: [PATCH] added trivy scan --- Dockerfile | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Dockerfile b/Dockerfile index fdecbda..e0ce03b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -24,5 +24,10 @@ RUN pip install -r requirements.txt # Copy the current directory contents into the container at /app # COPY . /app/ +# Run vulnerability scan on build image +FROM build AS vulnscan +COPY --from=aquasec/trivy:latest /usr/local/bin/trivy /usr/local/bin/trivy +RUN trivy rootfs --no-progress / + EXPOSE 8585 EXPOSE 8000