Skip to content

Update docker-practice/actions-setup-docker digest to 26fccec #455

Update docker-practice/actions-setup-docker digest to 26fccec

Update docker-practice/actions-setup-docker digest to 26fccec #455

name: CVE Scanning for Docker
on: [push, pull_request]
jobs:
scan-docker:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
# https://github.com/docker-practice/actions-setup-docker/pull/33
- uses: docker-practice/actions-setup-docker@26fccec59edc4e7045508c01b8123ed929220ed0
- name: Build
run: docker build -f Dockerfile -t user/app:latest .
working-directory: docker
- name: Scan for vulnerabilities
uses: crazy-max/ghaction-container-scan@674eade7c71e59463c98239c5f8ff505e2449bc0
with:
image: user/app:latest
env:
TRIVY_TIMEOUT: 20m