Integrated trivy for security scanning in CI #4

	name: CI

	on:
	push:

	pull_request:

	schedule:
	- cron: "30 12 * * *" # runs everyday at 12h30


	jobs:
	run-dagger-ci:
	runs-on: ubuntu-22.04
	steps:

	- name: grab code
	uses: actions/checkout@v4

	- name: setup Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.10'
	cache: pip
	cache-dependency-path: docker/backend/project_requirements.txt

	- name: install dagger for python
	uses: insightsengineering/pip-action@v2
	with:
	packages: dagger-io==0.9.8

	- name: run dagger
	uses: dagger/dagger-for-github@v5
	with:
	verb: run
	args: python tests/ci/main.py --with-tests
	version: 0.9.9

	# Periodically scan built image for vulnerabilities
	- name: run security scanning
	if: ${{ github.event.schedule }}
	uses: dagger/dagger-for-github@v5
	with:
	verb: run
	args: python tests/ci/main.py --with-security-scan
	version: 0.9.9

Provide feedback