📆 Scheduled container scanning workflow

[jacobwoffenden]

User Story

As an Analytical Platform engineer
I want a scheduled workflow for scanning the latest release of a container
So that we proactively patch or skip any CVEs in images we ship

Value / Purpose

Proposal for new Airflow image pipeline is to scan with Trivy, and consume a managed .trivyignore from the base image, where we skip any OS or base issues

Useful Contacts

@jacobwoffenden

User Types

No response

Hypothesis

If we... [do a thing]
Then... [this will happen]

Proposal

No response

Additional Information

No response

Definition of Done

• Workflow created
• Post to Slack