feat: support docker image scanning (#506)

apache · Sep 27, 2023 · c129ef5 · c129ef5
1 parent 305ae53
commit c129ef5
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/apisix_dev_push_docker_hub.yaml b/.github/workflows/apisix_dev_push_docker_hub.yaml
@@ -66,3 +66,9 @@ jobs:
       - name: Push apisix image to Docker Hub
         run: |
           make push-multiarch-dev-on-debian
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'apache/apisix:${{ APISIX_DOCKER_TAG }}'
+          severity: 'CRITICAL,HIGH'