Update docker-build.yml

aneisch · Jul 23, 2024 · 194e2bc · 194e2bc
1 parent 81fc822
commit 194e2bc
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
@@ -19,6 +19,15 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Run Trivy in GitHub SBOM mode and submit results to Dependency Graph
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: 'fs'
+          format: 'github'
+          output: 'dependency-results.sbom.json'
+          image-ref: '.'
+          github-pat: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Attempt Build
         run: docker build . --file Dockerfile -t $IMAGE_NAME