diff --git a/.github/workflows/scan_images.yaml b/.github/workflows/scan_images.yaml new file mode 100644 index 0000000..cb2db86 --- /dev/null +++ b/.github/workflows/scan_images.yaml @@ -0,0 +1,21 @@ +name: Scan images + +on: + schedule: + - cron: '00 23 * * *' + workflow_dispatch: + +jobs: + + scan-images: + name: Scan published images and report vulnerabilities + uses: canonical/charmed-kubeflow-workflows/.github/workflows/get-published-images-scan-and-report.yaml@main + strategy: + matrix: + branch: [main, track/0.11] + secrets: + GH_TOKEN: ${{ secrets.GH_TOKEN }} + with: + report-vulnerabilities: true + severity: "HIGH,CRITICAL" + branch: ${{ matrix.branch }}