diff --git a/.github/workflows/docker-hub.yml b/.github/workflows/docker-hub.yml index 0136992e..300b6bb2 100644 --- a/.github/workflows/docker-hub.yml +++ b/.github/workflows/docker-hub.yml @@ -1,4 +1,5 @@ name: Docker Hub Workflow +run-name: Docker Hub Workflow on: workflow_dispatch: @@ -48,6 +49,12 @@ jobs: name: Login to DockerHub if: github.event_name != 'pull_request' run: echo "$DOCKER_HUB_PASSWORD" | docker login -u "$DOCKER_HUB_USER" --password-stdin + - + name: Run trivy scan + uses: numerique-gouv/action-trivy-cache@main + with: + docker-build-args: '--target backend-production -f Dockerfile' + docker-image-name: 'docker.io/lasuite/meet-backend:${{ github.sha }}' - name: Build and push uses: docker/build-push-action@v5 @@ -92,6 +99,12 @@ jobs: name: Login to DockerHub if: github.event_name != 'pull_request' run: echo "$DOCKER_HUB_PASSWORD" | docker login -u "$DOCKER_HUB_USER" --password-stdin + - + name: Run trivy scan + uses: numerique-gouv/action-trivy-cache@main + with: + docker-build-args: '-f src/frontend/Dockerfile --target frontend-production' + docker-image-name: 'docker.io/lasuite/meet-frontend:${{ github.sha }}' - name: Build and push uses: docker/build-push-action@v5