You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
PR #588 actually implemented a vulnerability scan through the CodeQL Action. I haven't used myself any of those actions, so I've got no clue which one would be best for us and if they do pretty much the same thing.
@chicco785 is the scan done by the CodeQL action comparable to Anchore's? If so can we close this issue?
Is your feature request related to a problem? Please describe.
Should we get a tool to scan the Docker images we build to sniff out any security vulnerabilities?
Describe the solution you'd like
Here's a nice example contributed by @jason-fox of a GitHub action to run Anchore scanner over an image:
The action outputs a bunch of CVE alerts you can then decide how to deal with, as shown in the image below
Describe alternatives you've considered
N/A
Additional context
N/A
The text was updated successfully, but these errors were encountered: