Skip to content

Commit a37f565

Browse files
committed
Use github.repository to set REPO
1 parent 4640e2d commit a37f565

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

.github/workflows/main.yml

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,26 @@ on:
66
- master
77

88
jobs:
9+
scan:
10+
runs-on: ubuntu-latest
11+
steps:
12+
- uses: actions/checkout@v1
13+
- name: Build
14+
env:
15+
REPO: ${{ github.repository }}
16+
shell: bash
17+
run: |
18+
echo "docker_repo=${{ env.REPO }}" >> $GITHUB_ENV
19+
make build
20+
- name: Trivy vulnerability scanner
21+
uses: aquasecurity/trivy-action@0.0.20
22+
with:
23+
image-ref: '${{ env.docker_repo }}:latest'
24+
format: 'table'
25+
exit-code: '1'
26+
ignore-unfixed: true
27+
vuln-type: 'os,library'
28+
severity: 'CRITICAL,HIGH'
929
test:
1030
runs-on: ubuntu-latest
1131
steps:

0 commit comments

Comments
 (0)