Skip to content

Commit

Permalink
Merge pull request #148 from FHIR/do-20230828-trivy-check
Browse files Browse the repository at this point in the history
Add trivy check
  • Loading branch information
dotasek authored Aug 28, 2023
2 parents bb8fd95 + 33bd62e commit dacc524
Showing 1 changed file with 35 additions and 0 deletions.
35 changes: 35 additions & 0 deletions .github/workflows/trivy.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
name: Trivy Security Scans

on:
push:
branches: [ "master" ]
pull_request:
branches: [ "master" ]

workflow_dispatch:

jobs:
build:
name: build
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v3

- name: Run static analysis
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
vuln-type: 'library'
scanners: 'vuln,secret,config'
ignore-unfixed: true
format: 'sarif'
output: 'trivy-results.sarif'
severity: 'MEDIUM,HIGH,CRITICAL'


- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'trivy-results.sarif'
category: 'code'

0 comments on commit dacc524

Please sign in to comment.