ci: scan images with sysdig (#8037)

2026-09-21 12:44:32 +08:00 · 2023-06-20 22:58:17 +00:00
parent b398814ab0
commit 15cba05dfc
1 changed files with 9 additions and 0 deletions
@@ -125,6 +125,15 @@ jobs:
          pcc_pass: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }}
          image_name: ${{ steps.build.outputs.image }}

+      - name: Scan image
+        id: sysdig-scan
+        uses: sysdiglabs/scan-action@v3
+        with:
+          image-tag: ${{ steps.build.outputs.image }}
+          sysdig-secure-token: ${{ secrets.SYSDIG_API_TOKEN }}
+          input-type: docker-daemon
+          sysdig-secure-url: https://app.us4.sysdig.com
+
      - name: Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@41f05d9ecffa2ed3f1580af306000f734b733e54
        with: