--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Commit 8fb2e3c169d0a44037261339a2e2f70d4648f79d
Parents : 730dd0b
Author : Ivan <ivan@quad4.io>
Signature : Signature validation error
Date : 2026-03-31T06:07:25+03:00
feat(ci): add Trivy scan for Dockerfile misconfigurations
Changes
Diff
diff --git a/.gitea/workflows/scan.yml b/.gitea/workflows/scan.yml
index 7901f4ff..c9cac422 100644
--- a/.gitea/workflows/scan.yml
+++ b/.gitea/workflows/scan.yml
@@ -56,3 +56,6 @@ jobs:
- name: Trivy FS scan
run: trivy fs --exit-code 1 --skip-dirs .pnpm-store .
+
+ - name: Trivy Dockerfile misconfiguration
+ run: trivy config --exit-code 1 Dockerfile
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────