From 15cba05dfc6236d230dc018ae65f2be7c8dde8be Mon Sep 17 00:00:00 2001
From: Colin Adler <colin1adler@gmail.com>
Date: Tue, 20 Jun 2023 17:58:17 -0500
Subject: [PATCH] ci: scan images with sysdig (#8037)

---
 .github/workflows/security.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 90bbcc78ca..b0d9f3ec0c 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -125,6 +125,15 @@ jobs:
           pcc_pass: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }}
           image_name: ${{ steps.build.outputs.image }}
 
+      - name: Scan image
+        id: sysdig-scan
+        uses: sysdiglabs/scan-action@v3
+        with:
+          image-tag: ${{ steps.build.outputs.image }}
+          sysdig-secure-token: ${{ secrets.SYSDIG_API_TOKEN }}
+          input-type: docker-daemon
+          sysdig-secure-url: https://app.us4.sysdig.com
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@41f05d9ecffa2ed3f1580af306000f734b733e54
         with: