add-grype

.drone.yml

@@ -29,21 +29,21 @@ steps:
     when:
       event: pull_request
 
-#  - name: trivy security check
-#    image: aquasec/trivy
-#    volumes:
-#      - name: dockersock
-#        path: /var/run/docker.sock
-#    environment:
-#      REGISTRY: registry.fedy95.com
-#    commands:
-#      - "trivy \
-#         --exit-code 1 \
-#         --format json \
-#         --no-progress \
-#         $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA"
-#    when:
-#      event: pull_request
+  - name: trivy security check
+    image: aquasec/trivy
+    volumes:
+      - name: dockersock
+        path: /var/run/docker.sock
+    environment:
+      REGISTRY: registry.fedy95.com
+    commands:
+      - "trivy \
+         --exit-code 1 \
+         --format json \
+         --no-progress \
+         $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA"
+    when:
+      event: pull_request
 
   - name: grype security check
     image: docker:dind

README.md

@@ -6,4 +6,7 @@ Baseimage for CI tasks
 
 - [yamllint git](https://github.com/adrienverge/yamllint)
 - [alpine](https://pkgs.alpinelinux.org/packages?name=yamllint)
+
+### security scanners
 - [trivy](https://github.com/aquasecurity/trivy)
+- [grype](https://github.com/anchore/grype)