Schedule vulnerability scan over latest and version branches

ba-st · Apr 25, 2024 · d9cd459 · d9cd459
1 parent d0dc79f
commit d9cd459
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/.github/workflows/scheduled-security-scan.yml b/.github/workflows/scheduled-security-scan.yml
@@ -8,13 +8,19 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    name: Scheduled scan for vulnerabilities
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        version:
+          - latest
+          - v5
+    name: Scheduled scan for vulnerabilities ${{ matrix.version }}
     steps:
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: ghcr.io/${{ github.repository_owner }}/launchpad:latest
+          image-ref: ghcr.io/${{ github.repository_owner }}/launchpad:${{ matrix.version}}
           format: 'sarif'
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'