cve-scanning-docker.yml

name: CVE Scanning for Docker

on: [push, pull_request]

jobs:
  scan-docker:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      # https://github.com/docker-practice/actions-setup-docker/pull/33
      - uses: docker-practice/actions-setup-docker@d7be7913d15a6b821cc3ed75b4c03b48e1dde22c
      - name: Build
        run: docker build -f Dockerfile -t user/app:latest .
        working-directory: docker
      - name: Scan for vulnerabilities
        uses: crazy-max/ghaction-container-scan@674eade7c71e59463c98239c5f8ff505e2449bc0
        with:
          image: user/app:latest
        env:
          TRIVY_TIMEOUT: 20m