add scout in ci.yml

norefice-github · Jan 31, 2024 · 1b531d2 · 1b531d2
1 parent 19fe6c0
commit 1b531d2
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -82,4 +82,11 @@ jobs:
           platforms: "linux/arm64"
           sbom: false
           provenance: false 
-          github-token: ${{ secrets.GH_TOKEN }} # to be able to write the comment
+          github-token: ${{ secrets.GH_TOKEN }} # to be able to write the comment
+
+      - name: Docker Scout
+        id: docker-scout
+        uses: docker/scout-action@v1
+        with:
+          command: cves,recommendations
+          only-fixed: true