Skip to content

Commit 509dd04

Browse files
ci: enhance code quality workflow with security scanning
This change sets environment variables for Docker Scout using GitHub Secrets. It ensures authenticated scanning of images for vulnerabilities, improving the reliability of the workflow.
1 parent f937582 commit 509dd04

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.github/workflows/code-quality.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -74,6 +74,9 @@ jobs:
7474
load: true
7575
- name: Scan ${{ matrix.service.name }} image
7676
uses: docker/scout-action@v1
77+
env:
78+
DOCKER_SCOUT_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
79+
DOCKER_SCOUT_PASSWORD: ${{ secrets.DOCKERHUB_TOKEN }}
7780
with:
7881
command: cves
7982
image: ${{ matrix.service.tag }}

0 commit comments

Comments
 (0)