Scheduled Trivy Scan #932

	# Copyright 2021, 2024 Oracle Corporation and/or its affiliates.
	# Licensed under the Universal Permissive License v 1.0 as shown at
	# https://oss.oracle.com/licenses/upl.

	# ---------------------------------------------------------------------------
	# Coherence CLI GitHub Actions Scheduled Trivy Scan.
	# ---------------------------------------------------------------------------
	name: Scheduled Trivy Scan

	on:
	workflow_dispatch:
	push:
	branches-ignore:
	- gh-pages
	schedule:
	# Every day at midnight
	- cron: '0 0 * * *'

	jobs:
	build:
	runs-on: ubuntu-latest

	# Checkout the source, we need a depth of zero to fetch all of the history otherwise
	# the copyright check cannot work out the date of the files from Git.
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Get Docker Images
	shell: bash
	run: \|
	docker pull gcr.io/distroless/java17

	- name: Set up JDK
	uses: actions/setup-java@v4
	with:
	java-version: '17'
	distribution: 'zulu'

	- name: Cache Go Modules
	uses: actions/cache@v4
	with:
	path: ~/go/pkg/mod
	key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
	restore-keys: \|
	${{ runner.os }}-go-mods-

	- name: Cache Maven packages
	uses: actions/cache@v4
	with:
	path: ~/.m2
	key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
	restore-keys: ${{ runner.os }}-m2

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.21'

	- name: Trivy Scan
	shell: bash
	run: \|
	make clean trivy-scan

Provide feedback