add trivy scan to pipeline

2025-09-29 16:27:19 +10:00
parent ab23eec10b
commit d2a36f6d99
1 changed files with 61 additions and 51 deletions
@@ -44,6 +44,16 @@ jobs:
          tags: |
            git.aridgwayweb.com/armistace/blog:latest
      - name: Trivy Scan
        uses: aquasecurity/trivy-action@0.28.0
        with:
          image-ref: ${{ vars.DOCKER_SERVER }}/${{ vars.DOCKER_USERNAME }}/blog:latest
          format: table
          exit-code: 1
          ignore-unfixed: true
          vuln-type: os,library
          severity: HIGH,CRITICAL
      - name: Deploy
        run: |
          echo "Installing Kubectl"