Scan latest images

.github/workflows/trivy-scan-image.yaml

@@ -0,0 +1,55 @@
+#
+#  Copyright (c) 2023 Oracle and/or its affiliates. All rights reserved.
+#  DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
+#
+#  This code is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU General Public License version 2 only, as
+#  published by the Free Software Foundation.  Oracle designates this
+#  particular file as subject to the "Classpath" exception as provided
+#  by Oracle in the LICENSE file that accompanied this code.
+#
+#  This code is distributed in the hope that it will be useful, but WITHOUT
+#  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+#  FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+#  version 2 for more details (a copy is included in the LICENSE file that
+#  accompanied this code).
+#
+#  You should have received a copy of the GNU General Public License version
+#  2 along with this work; if not, write to the Free Software Foundation,
+#  Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+#
+#  Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
+#  or visit www.oracle.com if you need additional information or have any
+#  questions.
+#
+
+# ---------------------------------------------------------------------------
+# Coherence Helidon Sock Shop Actions Scheduled Trivy Image Scan
+# ---------------------------------------------------------------------------
+name: Scheduled Trivy Images Scan
+on:
+  workflow_dispatch:
+  schedule:
+    # Every day at midnight
+    - cron: '0 0 * * *'
+
+jobs:
+  build:
+    runs-on: ubuntu-20.04
+    strategy:
+      fail-fast: false
+      matrix:
+        package:
+          - carts
+          - catalog
+          - orders
+          - payment
+          - shipping
+          - users
+    steps:
+      - name: Run Trivy vulnerability scanner on ${{ matrix.package }}
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'ghcr.io/oracle/coherence-helidon-sockshop-${{ matrix.package }}:latest'
+          format: 'table'
+          exit-code: '1'