Update github-actions.yml

Accenture · Jan 10, 2025 · 1c92ac1 · 1c92ac1
1 parent 43b2082
commit 1c92ac1
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/workflows/github-actions.yml b/.github/workflows/github-actions.yml
@@ -110,6 +110,18 @@ jobs:
         username: ${{ secrets.DOCKERHUB_USERNAME }}
         password: ${{ secrets.DOCKERHUB_TOKEN }}
       if: startsWith(github.ref, 'refs/tags/')
+    - name: install checkov
+      run: |
+          ls $(pwd)/app/dockerfile/java
+          sudo apt update
+          sudo apt install software-properties-common
+          sudo add-apt-repository ppa:deadsnakes/ppa
+          sudo apt install python3.7
+          sudo apt install python3-pip
+          sudo python3.7 -m pip install -U checkov
+    - name: Scan Dockerfile
+      run: |
+          checkov --directory .
     - name: Build and push
       uses: docker/build-push-action@v6
       with: