add trivy scan

NimVek · Jul 26, 2024 · deb2eb6 · deb2eb6
1 parent 37c4a3d
commit deb2eb6
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/.github/workflows/analyse.yml b/.github/workflows/analyse.yml
@@ -35,3 +35,28 @@ jobs:
 
       - name: Analyze
         uses: github/codeql-action/analyze@v3
+
+  trivy:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest]
+
+    name: Trivy
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run Trivy
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: fs
+          ignore-unfixed: true
+          format: sarif
+          output: trivy-results.sarif
+
+      - name: Upload Trivy scan results
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: trivy-results.sarif