apiVersion: argoproj.io/v1alpha1
kind: ClusterWorkflowTemplate
metadata:
  name: trivy-filesystem-scan-template
spec:
  entrypoint: trivy-filesystem-scan
  templates:
    - name: trivy-filesystem-scan
      container:
        image: aquasec/trivy:0.56.2
        command: [sh, -c]
        args:
          - |
            set -e

            trivy fs --scanners license,vuln,misconfig,secret /shared-data/repo

            echo trivy-filesystem-scan task completed
        volumeMounts:
          - name: shared-data
            mountPath: /shared-data