Code Scanning #40

	name: Code Scanning

	on:
	workflow_dispatch: # run on request (no need for PR)
	schedule:
	# every UTC 6PM from Mon to Fri
	- cron: "0 18 * * 1-5"

	jobs:
	Trivy-scan:
	runs-on: ubuntu-20.04
	steps:
	- name: Checkout code
	uses: actions/checkout@v3
	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.10"
	- name: Install dependencies
	run: python -m pip install tox
	- name: Trivy Scanning
	env:
	TRIVY_DOWNLOAD_URL: ${{ vars.TRIVY_DOWNLOAD_URL }}
	run: tox -vv -e trivy-scan
	- name: Upload Trivy results artifact
	uses: actions/upload-artifact@v3
	with:
	name: trivy-results
	path: \|
	.tox/trivy-spdx-otx.json
	.tox/trivy-results-otx.txt
	.tox/trivy-results-otx.csv
	Bandit:
	runs-on: ubuntu-20.04
	steps:
	- name: Checkout repository
	uses: actions/checkout@v3
	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.10"
	- name: Install dependencies
	run: python -m pip install tox
	- name: Bandit Scanning
	run: tox -e bandit-scan
	- name: Upload Bandit artifact
	uses: actions/upload-artifact@v3
	with:
	name: bandit-report
	path: .tox/bandit-report.txt
	# Use always() to always run this step to publish scan results when there are test failures
	if: ${{ always() }}

Provide feedback