diff --git a/.drone.yml b/.drone.yml index 77b9626..de54e44 100644 --- a/.drone.yml +++ b/.drone.yml @@ -17,6 +17,23 @@ steps: when: event: pull_request + - name: trivy security check + image: aquasec/trivy +# volumes: +# - name: dockersock +# path: /var/run/docker.sock + environment: + REGISTRY: registry.fedy95.com + commands: + - docker build -t "$REGISTRY"/baseimage-yamllint:temp image -f image/Dockerfile + - "trivy \ + --exit-code 1 \ + --format json \ + --no-progress \ + $REGISTRY/baseimage-yamllint:temp" + when: + event: pull_request + - name: release image: docker:dind volumes: