diff --git a/.github/workflows/.github-ci.yaml b/.github/workflows/.github-ci.yaml index 040a63d..c806816 100644 --- a/.github/workflows/.github-ci.yaml +++ b/.github/workflows/.github-ci.yaml @@ -14,10 +14,12 @@ jobs: uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/checkout@main - name: Lint the Repository - uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/lint@rire_action_test - with: - source: './...' + run: | + which trivy + golangci-lint run ./... --out-format=json --timeout 5m --issues-exit-code 1 - #- name: Build Docker Container - #- name: Vulnerability Scanning + - name: Vulnerability Scanning + run: | + trivy image --scanners license,vuln,secret forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest + trivy image --image-config-scanners secret,misconfig forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest