diff --git a/azure-pipelines.yml b/azure-pipelines.yml index 69aafec..dfb2e53 100644 --- a/azure-pipelines.yml +++ b/azure-pipelines.yml @@ -36,3 +36,24 @@ stages: containerRegistry: $(dockerRegistryServiceConnection) tags: | $(tag) + #Publish Build Information + - task: Bash@3 + displayName: "Log Image Details" + inputs: + targetType: inline + script: | + echo "Pushed Image: $(containerRegistry)/$(imageRepository):$(tag)" + # Install Trivy Scanner on Agent + - task: Bash@3 + displayName: "Install Trivy" + inputs: + targetType: inline + script: | + curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh + # Run Trivy Scan + - task: Bash@3 + displayName: "Run Trivy Scan" + inputs: + targetType: inline + script: | + ./bin/trivy image --severity HIGH,CRITICAL,MEDIUM --ignore-unfixed $(containerRegistry)/$(imageRepository):$(tag)