Skip to content

Update dependency org.owasp:dependency-check-gradle to v9 #380

Update dependency org.owasp:dependency-check-gradle to v9

Update dependency org.owasp:dependency-check-gradle to v9 #380

name: CVE Scanning for Docker
on: [push, pull_request]
jobs:
scan-docker:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
# https://github.com/docker-practice/actions-setup-docker/pull/33
- uses: docker-practice/actions-setup-docker@d7be7913d15a6b821cc3ed75b4c03b48e1dde22c
- name: Build
run: docker build -f Dockerfile -t user/app:latest .
working-directory: docker
- name: Scan for vulnerabilities
uses: crazy-max/ghaction-container-scan@674eade7c71e59463c98239c5f8ff505e2449bc0
with:
image: user/app:latest
env:
TRIVY_TIMEOUT: 20m