From 22028a20b02f9ae2e103e233107c07bee4ab0432 Mon Sep 17 00:00:00 2001 From: Pascal Sthamer <10992664+P4sca1@users.noreply.github.com> Date: Tue, 8 Oct 2024 14:26:03 +0200 Subject: [PATCH] separate scanning into own job --- .github/workflows/ci.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3dafa6f2a..aadb33bbd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -138,6 +138,17 @@ jobs: tags: | ghcr.io/fkie-cad/logprep:py${{ matrix.python-version }}-${{ github.head_ref }} + trivy-scan: + runs-on: ubuntu-latest + needs: containerbuild + steps: + - name: Login to GitHub Container Registry + uses: docker/login-action@v2 + with: + registry: ghcr.io + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + # To avoid the trivy-db becoming outdated, we save the cache for one day - name: Get date id: date