ci: add grype vulnerability scanner

crypto-bug-hunters · Sep 13, 2024 · 73be8e0 · 73be8e0
1 parent d518c9d
commit 73be8e0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -91,6 +91,12 @@ jobs:
       - name: Install Node.js dependencies
         run: pnpm i
 
+      - name: Scan image
+        uses: anchore/scan-action@v3
+        with:
+          image: ${{ steps.build_machine.outputs.imageid }}
+          fail-build: false
+
       - name: Build Cartesi Machine image
         env:
           IMAGE_ID: ${{ steps.build_machine.outputs.imageid }}