test-trivy

.drone.yml

@@ -17,6 +17,23 @@ steps:
     when:
       event: pull_request
 
+  - name: trivy security check
+    image: aquasec/trivy
+#    volumes:
+#      - name: dockersock
+#        path: /var/run/docker.sock
+    environment:
+      REGISTRY: registry.fedy95.com
+    commands:
+      - docker build -t "$REGISTRY"/baseimage-yamllint:temp image -f image/Dockerfile
+      - "trivy \
+         --exit-code 1 \
+         --format json \
+         --no-progress \
+         $REGISTRY/baseimage-yamllint:temp"
+    when:
+      event: pull_request
+
   - name: release
     image: docker:dind
     volumes: