img scan added

Aadeshkale · Jan 5, 2024 · bfd6da7 · bfd6da7
1 parent 3ee75d9
commit bfd6da7
Showing 1 changed file with 11 additions and 6 deletions.
diff --git a/.github/workflows/ci-build.yaml b/.github/workflows/ci-build.yaml
@@ -19,12 +19,6 @@ jobs:
 
     - name: create a custom tag   
       run: echo "IMG_TAG=$(echo $GITHUB_SHA | cut -c 1-6)"-$job_id >> $GITHUB_ENV
-
-    - name: tag   
-      run: echo "$IMG_TAG"
-
-
-  # export IMG_TAG="$sha" | cut -c1-6
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
@@ -33,3 +27,14 @@ jobs:
       with:
         push: false
         tags: welcome-app:${{ env.IMG_TAG }}, welcome-app:${{ env.sha }}
+
+    #  Image Scan
+    - name: KSOC Image Scan
+      uses: ksoclabs/image-scan-action@v0.0.4
+      with:
+        fail_on_severity: medium
+        ignore_cves: |
+          CVE-2021-1234
+          CVE-2021-5678
+        image: localbuild/testimage:latest
+