Skip to content

:dependabot: github-actions(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 #91

:dependabot: github-actions(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0

:dependabot: github-actions(deps): Bump docker/build-push-action from 6.7.0 to 6.8.0 #91

Workflow file for this run

---
name: 🩻 Scan
on:
pull_request:
branches:
- main
permissions: {}
jobs:
scan:
name: Scan
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
id: checkout
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
- name: Build
id: build
shell: bash
env:
IMAGE_NAME: ghcr.io/${{ github.repository }}
IMAGE_TAG: ${{ github.sha }}
run: |
make build
- name: Scan
id: scan
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # v0.24.0
with:
image-ref: ghcr.io/${{ github.repository }}:${{ github.sha }}
severity: HIGH,CRITICAL
exit-code: 1