diff --git a/.github/actions/trivy/action.yml b/.github/actions/trivy/action.yml new file mode 100644 index 00000000000..46dc37c81ae --- /dev/null +++ b/.github/actions/trivy/action.yml @@ -0,0 +1,11 @@ +- name: Run Trivy vulnerability scanner + uses: aquasecurity/trivy-action@master + with: + scan-type: image + image-ref: ${{ github.repository }}/${{ steps.parse_tag.outputs.image }}:test + format: table + exit-code: 1 + ignore-unfixed: true + vuln-type: os,library + severity: LOW,MEDIUM,HIGH,CRITICAL +#MOVED LOCATION \ No newline at end of file