Skip to content

[DEVOPS-3893] ci: add docker scout action#39

Merged
Dion Gionet Mallet (dion-gionet) merged 2 commits intomasterfrom
devops/DEVOPS-3893
Sep 18, 2025
Merged

[DEVOPS-3893] ci: add docker scout action#39
Dion Gionet Mallet (dion-gionet) merged 2 commits intomasterfrom
devops/DEVOPS-3893

Conversation

@dion-gionet
Copy link
Contributor

Description

This PR adds Docker Scout vulnerability scanning to the Docker image build workflows.

Changes Made

  • Added Docker Scout action step to build-image.yml
  • Configured to scan for critical and high severity vulnerabilities
  • Set to ignore base image vulnerabilities and provide summary output

Docker Scout Configuration

- name: Docker Scout
  uses: docker/scout-action@v1
  with:
    command: cves
    image: devolutions/prux:${{ inputs.tag }}
    ignore-base: true
    only-severities: critical,high
    summary: true

Testing

  • Workflow runs successfully with Docker Scout
  • Vulnerability scan results are displayed in job output
  • No breaking changes to existing build process

Related Issues

  • DEVOPS-3893: Add Docker Scout to all Docker build workflows

Additional Notes

This is part of a larger initiative to add Docker Scout vulnerability scanning to all Docker image build workflows across the Devolutions organization for improved security posture.

@dion-gionet Dion Gionet Mallet (dion-gionet) marked this pull request as ready for review September 18, 2025 15:32
@dion-gionet Dion Gionet Mallet (dion-gionet) merged commit 0e95f76 into master Sep 18, 2025
1 check failed
@dion-gionet Dion Gionet Mallet (dion-gionet) deleted the devops/DEVOPS-3893 branch September 18, 2025 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants