feat: daily vuln scanner #221
Conversation
There was a problem hiding this comment.
Pull Request Overview
This PR introduces automated vulnerability scanning to the repository using Trivy, scheduled to run daily at 7:30 AM UTC. The workflow scans the filesystem for vulnerabilities in OS packages and libraries, as well as secrets and misconfigurations, reporting HIGH and CRITICAL severity issues to GitHub Security.
- Adds a GitHub Actions workflow for daily vulnerability scanning
- Configures Trivy to scan for vulnerabilities, secrets, and misconfigurations
- Sets up SARIF report upload to GitHub Security Events
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
There was a problem hiding this comment.
Pull Request Overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull Request Overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull Request Overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
2 participants
Summary
Scan repo for vulnerabilities across the OS, Libs, and License/config misconfigurations
Type of Change
Component(s) Affected
Testing
Checklist