Merge pull request #22 from Arvind644/main

update trivy
ortelius · Feb 8, 2023 · b4d3508 · b4d3508
2 parents 24d29b8 + 9b5890d
commit b4d3508
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/build-push-chart.yml b/.github/workflows/build-push-chart.yml
@@ -49,6 +49,19 @@ jobs:
         with:
           push: true
           tags: ${{ env.REGISTRY }}/${{ github.repository }}:${{ env.IMAGE_TAG }}
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: ${{ env.REGISTRY }}/${{ github.repository }}:${{ env.IMAGE_TAG }}
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v2
+        if: always()
+        with:
+          sarif_file: 'trivy-results.sarif'
 
       - name: Update Values and Chart
         id: chart