Update vulnerability scan steps for Wekan Docker images in CI workflow

This commit is contained in:
omri zaher 2025-09-27 13:36:49 +03:00
parent 0dd5692b9a
commit 1d31e5d32d

View file

@ -34,7 +34,7 @@ jobs:
# Save the tag for later steps
echo "WEKAN_IMAGE_TAG=$TAG" >> $GITHUB_ENV
- name: Scan Wekan Docker image for vulnerabilities
- name: Scan Wekan Docker image for vulnerabilities(Wekan)
uses: aquasecurity/trivy-action@master
with:
image-ref: '${{ secrets.DOCKERHUB_USERNAME }}/wekan:${{ env.WEKAN_IMAGE_TAG }}'
@ -43,6 +43,15 @@ jobs:
ignore-unfixed: true
exit-code: 0
- name: Scan wekan-selenium Docker image for vulnerabilities
uses: aquasecurity/trivy-action@master
with:
image-ref: 'omriza5/wekan-selenium:1.0.0'
format: 'table'
severity: 'HIGH,CRITICAL'
ignore-unfixed: true
exit-code: 0
- name: Create .env file
run: |
echo "WEKAN_IMAGE=omriza5/wekan:${WEKAN_IMAGE_TAG}" >> .env