mirror of
https://github.com/wimpysworld/stream-sprout
synced 2026-03-14 14:45:50 +01:00
1cb4c8ced3
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 3 to 4. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/anchore/scan-action/compare/v3...v4) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
35 lines
No EOL
818 B
YAML
35 lines
No EOL
818 B
YAML
name: "Vulnerability 🐞 scan 🔍 container"
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 10 * * 2"
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
vulnerability-scan:
|
|
name: "Build and scan"
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: build local container
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
file: ./Containerfile
|
|
tags: localbuild/testimage:latest
|
|
push: false
|
|
load: true
|
|
|
|
- name: Scan image
|
|
uses: anchore/scan-action@v4
|
|
with:
|
|
image: "localbuild/testimage:latest"
|
|
output-format: table
|
|
|
|
- name: Inspect action report
|
|
run: cat ${{ steps.scan.outputs.table }} |