Skip to content

Commit 6a50844

Browse files
committed
Add daily vulnerability scan
Adds a workflow that will run trivy scanner daily at 16:44. Looks for CVEs with at least MEDIUM severity.
1 parent dc54792 commit 6a50844

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

.github/workflows/trivy.yml

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
name: Vulnerability scan
2+
3+
on:
4+
schedule:
5+
- cron: "44 16 * * *"
6+
7+
jobs:
8+
build:
9+
name: Trivy fs scan
10+
runs-on: ubuntu-latest
11+
12+
steps:
13+
- uses: actions/checkout@v4
14+
- name: Run trivy in fs mode
15+
uses: aquasecurity/trivy-action@master
16+
with:
17+
scan-type: 'fs'
18+
scan-ref: '.'
19+
format: 'table'
20+
exit-code: '1'
21+
ignore-unfixed: false
22+
severity: 'CRITICAL,HIGH,MEDIUM'

0 commit comments

Comments
 (0)