cve-scanning-docker.yml

name: CVE Scanning for Docker

on: [push, pull_request]

jobs:
  scan-docker:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      # https://github.com/docker-practice/actions-setup-docker/pull/33
      - uses: docker-practice/actions-setup-docker@d7be7913d15a6b821cc3ed75b4c03b48e1dde22c
      - name: Build
        run: docker build -f Dockerfile -t user/app:latest .
        working-directory: docker
      - name: Scan for vulnerabilities
        uses: crazy-max/ghaction-container-scan@b8655ca932670210555a5d96615c416c031b33ac
        with:
          image: user/app:latest
        env:
          TRIVY_TIMEOUT: 20m