chore(docker): automatic updates + nightly security check (#7515)

Refs #7514
This commit is contained in:
Vladimir Gorej
2021-09-17 14:19:21 +03:00
committed by GitHub
parent 8ffb1aef97
commit 158c127965
2 changed files with 41 additions and 14 deletions

View File

@@ -0,0 +1,20 @@
name: Security scan for docker image
on:
workflow_dispatch:
schedule:
- cron: '30 4 * * *'
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'docker.io/swaggerapi/swagger-ui:unstable'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'