Skip to content

Scheduled Trivy Images Scan #68

Scheduled Trivy Images Scan

Scheduled Trivy Images Scan #68

#
# Copyright (c) 2023 Oracle and/or its affiliates. All rights reserved.
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
#
# This code is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License version 2 only, as
# published by the Free Software Foundation. Oracle designates this
# particular file as subject to the "Classpath" exception as provided
# by Oracle in the LICENSE file that accompanied this code.
#
# This code is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# version 2 for more details (a copy is included in the LICENSE file that
# accompanied this code).
#
# You should have received a copy of the GNU General Public License version
# 2 along with this work; if not, write to the Free Software Foundation,
# Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
# Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
# or visit www.oracle.com if you need additional information or have any
# questions.
#
# ---------------------------------------------------------------------------
# Coherence Helidon Sock Shop Actions Scheduled Trivy Image Scan
# ---------------------------------------------------------------------------
name: Scheduled Trivy Images Scan
on:
workflow_dispatch:
schedule:
# Every day at midnight
- cron: '0 0 * * *'
jobs:
build:
runs-on: ubuntu-20.04
strategy:
fail-fast: false
matrix:
package:
- carts
- catalog
- orders
- payment
- shipping
- users
steps:
- name: Run Trivy vulnerability scanner on ${{ matrix.package }}
uses: aquasecurity/trivy-action@master
with:
image-ref: 'ghcr.io/oracle/coherence-helidon-sockshop-${{ matrix.package }}:latest'
format: 'table'
exit-code: '1'