Add trivy scan for runner images

streamnative · Apr 30, 2024 · 476623a · 476623a
1 parent b2356ff
commit 476623a
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/.github/workflows/test-function-runner.yml b/.github/workflows/test-function-runner.yml
@@ -59,6 +59,27 @@ jobs:
         run: |
           PULSAR_IMAGE_TAG=3.2.2.1 PULSAR_IMAGE=streamnative/sn-platform KIND_PUSH=false images/build.sh
 
+      - name: Run Trivy vulnerability scanner for java
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'localhost:5000/pulsar-functions-java-runner:3.2.2.1'
+          format: 'table'
+          exit-code: '1'
+
+      - name: Run Trivy vulnerability scanner for python
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'localhost:5000/pulsar-functions-python-runner:3.2.2.1'
+          format: 'table'
+          exit-code: '1'
+
+      - name: Run Trivy vulnerability scanner for go
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'localhost:5000/pulsar-functions-go-runner:3.2.2.1'
+          format: 'table'
+          exit-code: '1'
+
       - name: Verify function runner
         run: |
           .ci/verify_function_runner.sh