From 0f7f799efd80c2c6586db9d922f77749d7ec167d Mon Sep 17 00:00:00 2001 From: Carlos A Becker Date: Fri, 22 Jul 2022 11:44:05 -0300 Subject: [PATCH] chore(ci): scan with grype Signed-off-by: Carlos A Becker --- .github/workflows/grype.yml | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/workflows/grype.yml diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml new file mode 100644 index 000000000..4c3e97818 --- /dev/null +++ b/.github/workflows/grype.yml @@ -0,0 +1,37 @@ +name: "grype" + +on: + push: + branches: [ main ] + +jobs: + scan-source: + name: scan-source + runs-on: ubuntu-latest + + permissions: + security-events: write + actions: read + contents: read + + steps: + - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3 + - uses: anchore/scan-action@v3 + with: + path: "." + fail-build: false + + scan-image: + name: scan-image + runs-on: ubuntu-latest + + permissions: + security-events: write + actions: read + contents: read + + steps: + - uses: anchore/scan-action@v3 + with: + image: "goreleaser/goreleaser:latest" + fail-build: false