Skip to content

Vulnerability Scan #493

Vulnerability Scan

Vulnerability Scan #493

---
name: Vulnerability Scan
on:
schedule:
- cron: "30 2 * * *"
workflow_dispatch:
permissions: {}
jobs:
vulnerability-scan:
runs-on: ubuntu-latest
strategy:
matrix:
flavor: ["cpp", "rust"]
permissions:
security-events: write
steps:
- uses: crazy-max/ghaction-container-scan@3e9c23f89cd6b0bda949ffe14f28a3ce282323b7 # v3.0.0
id: scan
with:
image: ghcr.io/${{ github.repository }}-${{ matrix.flavor }}:latest
dockerfile: .devcontainer/Dockerfile
- uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
if: steps.scan.outputs.sarif != ''
with:
sarif_file: ${{ steps.scan.outputs.sarif }}