Altinn / Altinn/altinn-platform

Run vulnerability checks in the images we have published

Open
#2,189 0 comments 0 reactions 1 assignee Claimed by @monteiro-renato View on GitHub
kind/feature-request status/triage
Dominant language
Go
Stars
13
Forks
7
Avg merge
19h 21m
Merged PRs (30d)
76

Description

### Description

We currently have a workflow to run trivy when we want to publish new images https://github.com/Altinn/altinn-platform/blob/main/.github/workflows/reusable-image-scan-and-release-ghcr.yml. We don't, however, run checks to make sure our latest published images do not have vulnerabilities.

We should add a check for those.

P.S: I don't think we have public facing images and with renovate updating our dependencies, I don't think this is too critical for us. Should be an easy one to do anyways.

### Additional Information

_No response_

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.