diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml index 90bbcc78ca..b0d9f3ec0c 100644 --- a/.github/workflows/security.yaml +++ b/.github/workflows/security.yaml @@ -125,6 +125,15 @@ jobs: pcc_pass: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }} image_name: ${{ steps.build.outputs.image }} + - name: Scan image + id: sysdig-scan + uses: sysdiglabs/scan-action@v3 + with: + image-tag: ${{ steps.build.outputs.image }} + sysdig-secure-token: ${{ secrets.SYSDIG_API_TOKEN }} + input-type: docker-daemon + sysdig-secure-url: https://app.us4.sysdig.com + - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@41f05d9ecffa2ed3f1580af306000f734b733e54 with: