ci: add docker scan (#15)

datastax · May 20, 2024 · 024fe21 · 024fe21
1 parent d9ce3d2
commit 024fe21
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/ragstack-test.yml b/.github/workflows/ragstack-test.yml
@@ -54,3 +54,17 @@ jobs:
           token: ${{ secrets.TESTS_ASTRA_DEV_DB_TOKEN }}
           name: ${{ steps.astra.outputs.name }}
           wait: false
+
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Docker
+        run: ./ragstack/docker/build-backend.sh
+      - name: Scan Docker image
+        uses: snyk/actions/docker@master
+        with:
+          image: ragstack-ai-langflow-backend:latest
+          args: --severity-threshold=high
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}