reintroduce trivy scan

canonical · Feb 14, 2024 · 9e383e3 · 9e383e3
1 parent 0371e00
commit 9e383e3
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/pull_request.yaml b/.github/workflows/pull_request.yaml
@@ -15,6 +15,13 @@ jobs:
       multiarch-awareness: true
       cache-action: ${{ (github.event_name == 'push') && 'save' || 'restore' }}
       platform-labels: '{"arm64": ["Ubuntu_ARM64_4C_16G_01"]}'
+  scan-images:
+    needs: build-and-push-arch-specifics
+    uses: canonical/k8s-workflows/.github/workflows/scan_images.yaml@KU-158/arm-builder
+    secrets: inherit
+    with:
+      images: ${{ needs.build-and-push-arch-specifics.outputs.images }}
+      trivy-image-config: ./trivy.yaml
   build-and-push-multiarch-manifest:
     name: Combine Rocks and Push Multiarch Manifest
     uses: canonical/k8s-workflows/.github/workflows/assemble_multiarch_image.yaml@KU-158/arm-builder