Altinn / Altinn/altinn-platform
Run vulnerability checks in the images we have published
Open
kind/feature-request
status/triage
- Dominant language
- Go
- Stars
- 13
- Forks
- 7
- Avg merge
- 19h 21m
- Merged PRs (30d)
- 76
Description
### Description
We currently have a workflow to run trivy when we want to publish new images https://github.com/Altinn/altinn-platform/blob/main/.github/workflows/reusable-image-scan-and-release-ghcr.yml. We don't, however, run checks to make sure our latest published images do not have vulnerabilities.
We should add a check for those.
P.S: I don't think we have public facing images and with renovate updating our dependencies, I don't think this is too critical for us. Should be an easy one to do anyways.
### Additional Information
_No response_
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.