gha: Add trivy step (#1)

peaceiris · Dec 7, 2019 · 4fdebfb · 4fdebfb
1 parent f3df1c9
commit 4fdebfb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
@@ -65,6 +65,11 @@ jobs:
     - run: docker images
     - run: docker run --rm ${PKG_TAG} --version
 
+    - name: Scan image
+      run: |
+        docker run --rm -v /var/run/docker.sock:/var/run/docker.sock \
+          -v ${HOME}/.cache:/root/.cache aquasec/trivy:latest --exit-code 1 ${PKG_TAG}
+
     - name: Login to Registries
       if: github.event_name != 'pull_request'
       env: