Merge 03f092c into 853d388

broadinstitute · Aug 10, 2020 · 86a2590 · 86a2590
2 parents 853d388 + 03f092c
commit 86a2590
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/docker/build.sh b/docker/build.sh
@@ -124,6 +124,10 @@ function docker_cmd()
         echo "building ${DOCKERHUB_REGISTRY}:${HASH_TAG}..."
         docker build -t $DOCKERHUB_REGISTRY:${HASH_TAG} .
 
+        echo "scanning docker image..."
+        docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -v "$HOME"/Library/Caches:/root/.cache/ aquasec/trivy --exit-code 1 --severity CRITICAL "$DOCKERHUB_REGISTRY":"${HASH_TAG}"
+
+
         echo "building ${DOCKERHUB_TESTS_REGISTRY}:${HASH_TAG}..."
         cd automation
         docker build -f Dockerfile-tests -t $DOCKERHUB_TESTS_REGISTRY:${HASH_TAG} .