Skip to content

refactor(chore): sonar issues fix #61

refactor(chore): sonar issues fix

refactor(chore): sonar issues fix #61

Workflow file for this run

# This is a basic workflow to help you get started with Actions
name: Trivy Scan
# Controls when the action will run. Triggers the workflow on push or pull request
# events but only for the master branch
on:
pull_request:
branches: [master]
types: [opened, synchronize, reopened]
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
# This workflow contains a single job called "trivy"
trivy:
# The type of runner that the job will run on
runs-on: [self-hosted, linux, codebuild]
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- uses: actions/checkout@v3
- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@0.28.0
with:
scan-type: "fs"
scan-ref: "${{ github.workspace }}"
trivy-config: "${{ github.workspace }}/trivy.yaml"