Add fossa scan for image (#40)

castai · Jul 27, 2023 · ae4b9ca · ae4b9ca
1 parent 026348d
commit ae4b9ca
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -102,4 +102,16 @@ jobs:
           platforms: linux/arm64,linux/amd64
           tags: |
             us-docker.pkg.dev/castai-hub/library/audit-logs-receiver:${{ env.RELEASE_TAG }}
-            us-docker.pkg.dev/castai-hub/library/audit-logs-receiver:latest
+            us-docker.pkg.dev/castai-hub/library/audit-logs-receiver:latest
+
+      - name: Docker pull for fossa main
+        if: github.event_name == 'release'
+        run: docker pull us-docker.pkg.dev/castai-hub/library/audit-logs-receiver:${{ env.RELEASE_TAG }}
+
+      - name: FOSSA scan docker image
+        if: github.event_name == 'release'
+        continue-on-error: true
+        uses: fossas/fossa-action@v1
+        with:
+          api-key: ${{ secrets.FOSSA_API_KEY }}
+          container: us-docker.pkg.dev/castai-hub/library/audit-logs-receiver:${{ env.RELEASE_TAG }}