Skip to content

Commit

Permalink
Create trivy.yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
KRANTHI0918 committed Sep 29, 2023
1 parent 0cea538 commit d06803a
Showing 1 changed file with 39 additions and 0 deletions.
39 changes: 39 additions & 0 deletions .github/workflows/trivy.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
name: trivy
on:
push:
branches: [ "master" ]
pull_request:
# The branches below must be a subset of the branches above
branches: [ "master" ]
schedule:
- cron: '29 19 * * 6'
permissions:
contents: read

jobs:
build:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
name: Build
runs-on: ubuntu-20.04
steps:
- name: Checkout code
uses: actions/checkout@v3

- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@master
with:
scan-type: 'repo'
ignore-unfixed: true
format: 'table'
output: 'trivy-results'
severity: 'CRITICAL'
github-pat: ${{ secrets.TOKEN }}

- name: upload github artifacts
uses: actions/upload-artifact@v3
with:
name: trivy-results
path: ./trivy-results

0 comments on commit d06803a

Please sign in to comment.