add grype docker image scanning

kool-dev · Jan 30, 2021 · 3e96bd3 · 3e96bd3
1 parent 4d7176e
commit 3e96bd3
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -26,6 +26,13 @@ jobs:
         TAGNAME: ${{ steps.tagName.outputs.tag }}
       run: docker run kooldev/kool:$TAGNAME kool --version
 
+    - name: Scan image
+      uses: anchore/scan-action@v2
+      with:
+        image: "kooldev/kool:$TAGNAME"
+        fail-build: true
+        severity-cutoff: critical
+
     - name: Push to hub
       env:
         TAGNAME: ${{ steps.tagName.outputs.tag }}