Trivy Scan #455

	name: Trivy Scan

	on:
	workflow_dispatch:
	schedule:
	- cron: "17 17 * * *"

	permissions:
	contents: read

	jobs:
	build:
	permissions:
	contents: read
	security-events: write
	name: Scan
	runs-on: "ubuntu-latest"
	steps:
	- name: Checkout Code
	uses: actions/checkout@v4

	- name: Get repository name
	run: echo "REPOSITORY_NAME=${GITHUB_REPOSITORY#*/}" >> $GITHUB_ENV

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version: "^1.17"

	- name: Build Project
	run: make build

	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/[email protected]
	with:
	scan-type: "fs"
	format: "sarif"
	output: "trivy-results.sarif"
	severity: "CRITICAL,HIGH"

	- name: Upload Trivy scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v2
	with:
	sarif_file: "trivy-results.sarif"

Provide feedback