Update main.yml

nanuchi · Oct 27, 2023 · 9157619 · 9157619
1 parent e5768c1
commit 9157619
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -55,8 +55,28 @@ jobs:
        name: safety-check-findings
        path: sca-report.json
 
+ image_scan:
+   name: Build Image and Run Image Scan
+   runs-on: ubuntu-latest
+
+   steps:
+   - name: Checkout code
+     uses: actions/checkout@v2
+
+   - name: Set up Docker
+     uses: docker-practice/actions-setup-docker@v1
+     with:
+       docker_version: '20.10.7'
 
+   - name: Build Docker Image
+     run: docker build -f Dockerfile -t myapp:latest .
 
+   - name: Docker Scout Scan
+     run: |
+       curl -fsSL https://raw.githubusercontent.com/docker/scout-cli/main/install.sh -o install-scout.sh
+       sh install-scout.sh
+       docker scout quickview
+       docker scout cves