Skip to content
Docker Image Hardening & Vulnerability Scan

feat(docker): harden backend and frontend images with non-root user and Trivy CVE scanning #2

Sign in to view logs

feat(docker): harden backend and frontend images with non-root user and Trivy CVE scanning

feat(docker): harden backend and frontend images with non-root user and Trivy CVE scanning #2

Triggered via pull request May 27, 2026 21:25
@Aditi-24-05Aditi-24-05
synchronize #364
Aditi-24-05:feature/docker-image-hardening-vulnerability-scan
Status Failure
Total duration 59s
Artifacts 4

docker-image-scan.yml

on: pull_request
Matrix: build
Synthetic CVE policy gate test
2s
Synthetic CVE policy gate test
Matrix: hardening-check
Matrix: trivy-scan
Fit to window
Zoom out
Zoom in

Annotations

5 errors and 2 warnings
Synthetic CVE policy gate test
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
Trivy scan – backend
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
Hardening checks – backend
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
Hardening checks – frontend
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
Trivy scan – frontend
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
Build frontend image
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build backend image
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, docker/build-push-action@v6, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
secuscan-backend-tar Expired
201 MB
sha256:ab4f8dfc106f84640447856e901a049fa0bd5375c2e7895b4f85b61b628b120d
secuscan-frontend-tar Expired
22.6 MB
sha256:460667a9f9e7f18d6138cdc5d9484b02e113af80ebbb730f3d00ea7d780394cc
utksh1~SecuScan~C8KQ77.dockerbuild
36 KB
sha256:0272ab0d034900fe009a7205d28930314ebb873673c0bbeb4f95c66e1fbb6e98
utksh1~SecuScan~SKJHJ6.dockerbuild
31.1 KB
sha256:7e84d267799b9352973ca3f217ffb91845e9b879c562937189abc023ab7bc2e9