Merge pull request #595 from Sage-Bionetworks/FDS-1590-container-scan

Fds 1590 container scan

.github/workflows/docker_build.yml

@@ -54,4 +54,16 @@ jobs:
           build-args: |
             DCA_VERSION=${{ env.DCA_VERSION }}
 
-
+      - name: Lowercase image name for trivy
+        id: string
+        uses: ASzc/change-string-case-action@v6
+        with:
+          string: ${{ env.IMAGE_PATH }}
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: '${{ steps.string.outputs.lowercase }}:${{ steps.meta.outputs.version }}'
+          format: 'table'
+          ignore-unfixed: true
+          severity: 'CRITICAL,HIGH'