build(deps): bump the analytics-dependencies group across 1 directory with 15 updates #311

	name: Trivy Security Scan

	on:
	push:
	branches: [main]
	paths-ignore:
	- '*/.md'
	- 'docs/**'
	pull_request:
	branches: [main]
	paths-ignore:
	- '*/.md'
	- 'docs/**'

	concurrency:
	group: trivy-scan-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	trivy:
	name: Trivy Scan
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Build Postgres image
	uses: docker/build-push-action@v5
	with:
	context: infrastructure/docker
	file: infrastructure/docker/postgres.Dockerfile
	push: false
	load: true
	pull: true
	tags: vertexchain-postgres:latest

	- name: Run Trivy image vulnerability scan
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: 'vertexchain-postgres:latest'
	format: 'table'
	exit-code: '1'
	severity: 'CRITICAL,HIGH'

	- name: Run Trivy filesystem vulnerability scan
	uses: aquasecurity/trivy-action@master
	with:
	scan-type: 'fs'
	scan-ref: 'infrastructure'
	format: 'table'
	exit-code: '1'
	severity: 'CRITICAL,HIGH'

Navigation Menu