Skip to content
Container Security Scan

Update scan_code.yml #2

Sign in to view logs

Update scan_code.yml

Update scan_code.yml #2

Workflow file for this run

.github/workflows/scan_code.yml at e200396
name: Container Security Scan
on:
push:
branches:
- '**'
# schedule:
# - cron: '0 12 * * 1' # Weekly scan on Mondays at 12:00 UTC
jobs:
security_scan:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Log in to GitHub Container Registry
run: echo "${{ secrets.SK_PAT }}" | docker login ghcr.io -u ${{ github.actor }}
- name: Pull container image
run: docker pull ghcr.io/flaxandteal/arches_coral_static:latest
- name: Run Snyk scan
uses: snyk/actions/docker@master
env:
SK_PAT: ${{ secrets.SK_PAT }}
with:
image: ghcr.io/flaxandteal/arches_coral_static:latest
args: --file=Dockerfile --severity-threshold=high