Skip to content

Merge pull request #385 from chiukapoor/1.29-oct-24 #74

Merge pull request #385 from chiukapoor/1.29-oct-24

Merge pull request #385 from chiukapoor/1.29-oct-24 #74

Workflow file for this run

name: Run Trivy scan
on:
push:
tags:
- '*'
pull_request:
jobs:
trivy:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout Repo
uses: actions/checkout@v4
- name: Get base image
run: |
image=$(grep hyperkube-base Dockerfile | awk '{ print $2 }')
echo "HYPERKUBE=${image}"
echo "HYPERKUBE=${image}" >> "$GITHUB_ENV"
- name: Run Trivy scanner
uses: aquasecurity/[email protected]
with:
image-ref: ${{ env.HYPERKUBE }}
exit-code: '1'
severity: 'CRITICAL,HIGH'