We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 81ac9b0 commit 2b9e5e8Copy full SHA for 2b9e5e8
.github/workflows/security.yml
@@ -0,0 +1,32 @@
1
+name: Security
2
+
3
+on:
4
+ push:
5
+ branches:
6
+ - master
7
8
+jobs:
9
+ test:
10
+ name: Security Test
11
+ runs-on: ubuntu-latest
12
+ steps:
13
+ - name: Checkout the repo
14
+ uses: actions/checkout@v1
15
16
+ - name: Build my Image
17
+ env:
18
+ REPO: 'jerusdp/lambda-rust'
19
+ run: |
20
+ echo "docker_repo=${{ env.REPO }}" >> $GITHUB_ENV
21
+ make build
22
23
+ - name: Run Trivy vulnerability scanner
24
+ uses: aquasecurity/trivy-action@0.0.20
25
+ with:
26
+ image-ref: '${{ env.docker_repo }}:latest'
27
+ format: 'table'
28
+ exit-code: '1'
29
+ ignore-unfixed: true
30
+ vuln-type: 'os,library'
31
+ severity: 'CRITICAL,HIGH'
32
0 commit comments