Merge pull request #75 from InseeFr/EricThuaud-patch-1

Update ci-rc.yml
InseeFr · Jul 8, 2024 · cc51c1f · cc51c1f
2 parents 4bb7362 + 4eb900c
commit cc51c1f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/ci-rc.yml b/.github/workflows/ci-rc.yml
@@ -17,6 +17,14 @@ jobs:
           java-version: 21
       - name: Build with Maven
         run: mvn -B clean package
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/[email protected]
+        with:
+          format: 'table'
+          scan-type: 'repo'
+          exit-code: '1'
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
       - name: Upload jar
         uses: actions/upload-artifact@v3
         with: