Scan #133

	name: Scan
	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	schedule:
	- cron: '18 10 * * 3'

	permissions:
	contents: read # for actions/checkout to fetch code
	security-events: write # for codeQL to write security events

	jobs:
	codeql:
	name: CodeQL
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v2
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v1
	with:
	languages: go
	- name: Autobuild
	uses: github/codeql-action/autobuild@v1
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v1

	trivy:
	name: Trivy
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v2
	- name: Build cue-flux-controller image
	run: \|
	make docker-build
	- name: Run Trivy vulnerability scanner
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: 'ghcr.io/phoban01/cue-controller:latest'
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH'

Provide feedback