Setup container scanning on-push

[tomkerkhove]

Setup container scanning on-push with Snyk

[tomkerkhove]

GitHub Actions that I'll use:

• https://github.com/snyk/actions/tree/master/docker
• https://github.com/snyk/actions/tree/master/golang

[tomkerkhove]

This will be incorporated in master/nightly build and PR/master/nightly for Go.

[tomkerkhove]

This is setup to scan Dockerfile during PRs:

Maintainers can view the report in Snyk, unfortunately we cannot make it public.

[idvoretskyi]

/cc @idvoretskyi

[zroubalik]

@tomkerkhove I think this is alread done, am I right?

[tomkerkhove]

Yes, through their integration but checking with CNCF to get more insights and apparently GH Actions is the best way to go!

[idvoretskyi]

@tomkerkhove what is the issue with the Snyk app/integration?

[tomkerkhove]

Nothing, but I thought you wanted to use GitHub Actions instead of it because of our open Snyk Pro ticket?