Added trivy-analysis.yml - Githubissues

iver-wharf / wharf-provider-gitlab

Import Wharf projects from GitLab repositories

MIT License

2 stars 0 forks source link

Added trivy-analysis.yml #35

Closed applejag closed 3 years ago

applejag commented 3 years ago

Changes

Added trivy-analysis.yml, based on the one added in iver-wharf/wharf-api#103
- runs make docker to build the image
- runs every day at 06:00 o'clock (UTC) on the master branch
- runs on commits added to master
- runs on pull requests targeting master

Motivation

Gives us a heads up if we need to update our dependencies before even merging. Such as for CVE's on alpine

Closes #33