Skip to content
# name: Grype Vulnerability Scan
# permissions:
# contents: read
# on:
# push:
# branches:
# - main
# pull_request:
# branches:
# - main
# jobs:
# grype-scan:
# runs-on: ubuntu-latest
# steps:
# - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
# - name: Use Node.js latest
# uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
# with:
# node-version: 20
# cache: "npm"
# - name: Install Pepr Dependencies
# run: npm ci
# - name: Build Pepr Dev Image
# run: npm run build:image
# - name: Scan image
# uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5 # v4.1.2
# with:
# image: "pepr:dev"
# fail-build: true
# severity-cutoff: high