Replace azure container scan

Altinn · Nov 8, 2024 · 52c7e2b · 52c7e2b
1 parent fcefb86
commit 52c7e2b
Showing 1 changed file with 10 additions and 3 deletions.
diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml
@@ -22,8 +22,15 @@ jobs:
     - name: Build the Docker image
       run: docker build . --tag altinn-notifications:${{github.sha}}
 
-    - uses: Azure/[email protected]
+    - name: Run Trivy vulnerability scanner
+      uses: aquasecurity/[email protected]
       with:
-        image-name: altinn-notifications:${{ github.sha }}
+        image-ref: 'altinn-notifications:${{ github.sha }}'
+        format: 'table'
+        exit-code: '1'
+        ignore-unfixed: true
+        vuln-type: 'os,library'
+        severity: 'CRITICAL,HIGH'
       env:
-        DOCKLE_HOST: "unix:///var/run/docker.sock"
+        TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
+        TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db