probando trivy

edgar4all · Jan 7, 2024 · 6a7b026 · 6a7b026
1 parent b0fda15
commit 6a7b026
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
@@ -18,6 +18,12 @@ jobs:
       uses: hadolint/[email protected]
       with:
         dockerfile: Dockerfile    
+    - 
+      name: Scan Docker image with Trivy
+      uses: aquasecurity/trivy-action@master
+      with:
+        image-ref: ${{ secrets.DOCKERUSER }}/react-todo-list:${{ github.run_number }}
+        #exit-code-on-severity: "HIGH"        
     -
       name: Login to Docker Hub edgar4all
       uses: docker/login-action@v3