chore(docker): automatic updates + nightly security check (#7515)

Refs #7514

.github/_dependabot_.yaml

@@ -1,16 +1,23 @@
 version: 2
 updates:
-- package-ecosystem: npm
+  - package-ecosystem: npm
-  directory: "/"
+    directory: "/"
-  schedule:
+    schedule:
-    interval: daily
+      interval: daily
-  commit-message:
+    commit-message:
-    prefix: "chore"
+      prefix: "chore"
-    include: "scope"  
+      include: "scope"
-  open-pull-requests-limit: 6
+    open-pull-requests-limit: 6
-  ignore:
+    ignore:
-    # node-fetch must be synced manually
+      # node-fetch must be synced manually
-    - dependency-name: "node-fetch"
+      - dependency-name: "node-fetch"
-    - dependency-name: "release-it"
+      - dependency-name: "release-it"
-    - dependency-name: "@release-it/conventional-changelog"
+      - dependency-name: "@release-it/conventional-changelog"
-    
+
+  - package-ecosystem: "docker"
+    # Look for a `Dockerfile` in the `root` directory
+    directory: "/"
+    # Check for updates once a week
+    schedule:
+      interval: "weekly"
+

.github/workflows/docker-image-check.yml

@@ -0,0 +1,20 @@
+name: Security scan for docker image
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron:  '30 4 * * *'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'docker.io/swaggerapi/swagger-ui:unstable'
+          format: 'table'
+          exit-code: '1'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'