Commit Graph

2 Commits

Author SHA1 Message Date
Juan Antonio Osorio f41f84d1f9 ci: Use Trivy for vulnerability scans (#4804)
This uses Trivy to scan both the Git repo, as well as the generated
container image for vulnerabilities. It leverages Trivy's GitHub action
[1]. Currently, it's set to alert on `CRITICAL` and `HIGH`
vulnerabilities only.

[1] https://github.com/aquasecurity/trivy-action

This adds a section in the developer docs, as well as comments on the GitHub workflows.

Signed-off-by: Juan Antonio Osorio <juan.osoriorobles@eu.equinix.com>
2022-06-23 08:17:28 +02:00
Peter ONeill 7a93658e4b Update Contributing Docs
Signed-off-by: Peter ONeill <peteroneilljr@gmail.com>
2021-12-01 10:49:24 -08:00