Skip to content

Commit c4eb6b8

Browse files
Update .github/workflows/release-image.yml
Co-authored-by: qodo-merge-pro[bot] <151058649+qodo-merge-pro[bot]@users.noreply.github.com>
1 parent 8d2e6ec commit c4eb6b8

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

.github/workflows/release-image.yml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,5 +33,20 @@ jobs:
3333
with:
3434
context: .
3535
file: ./Dockerfile
36+
push: false
37+
tags: ${{ env.TAGS }}
38+
39+
- name: Scan image for vulnerabilities
40+
uses: aquasecurity/trivy-action@master
41+
with:
42+
image-ref: ${{ env.TAGS }}
43+
format: 'table'
44+
exit-code: '1'
45+
severity: 'CRITICAL,HIGH'
46+
47+
- name: Push image
48+
uses: docker/build-push-action@v5
49+
with:
50+
context: .
3651
push: true
3752
tags: ${{ env.TAGS }}

0 commit comments

Comments
 (0)