Skip to content

ci: add Trivy Docker image vulnerability scanning with ignore support#379

Merged
dev-fatima-24 merged 2 commits into
dev-fatima-24:mainfrom
Fayyo:Add_Docker_image_vulnerability
May 28, 2026
Merged

ci: add Trivy Docker image vulnerability scanning with ignore support#379
dev-fatima-24 merged 2 commits into
dev-fatima-24:mainfrom
Fayyo:Add_Docker_image_vulnerability

Conversation

@Fayyo
Copy link
Copy Markdown
Contributor

@Fayyo Fayyo commented May 27, 2026

Close #327

PR Description

Add Docker image vulnerability scanning to CI using Trivy

  • Added container-scan job to ci.yml
  • Scans backend, frontend, and python-service Docker images
  • Fails CI on HIGH or CRITICAL vulnerabilities
  • Uploads Trivy SARIF results as artifacts
  • Added .trivyignore for false-positive suppression
  • Included container-scan in all-tests gating

@drips-wave
Copy link
Copy Markdown

drips-wave Bot commented May 27, 2026

@Fayyo Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@dev-fatima-24 dev-fatima-24 merged commit d51ebbb into dev-fatima-24:main May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[DEVOPS] Add Docker image vulnerability scanning to CI

2 participants