trivy

.woodpecker.yml

@@ -13,6 +13,12 @@ steps:
       dockerfile: Dockerfile
     when:
       - event: [push, tag]
+  scan_image:
+    image: aquasec/trivy
+    commands:
+      - trivy image $FORGE_NAME/$CI_REPO:$CI_COMMIT_SHA --quiet --exit-code 1
+    when:
+      - event: [push, tag]
   build:
     image: plugins/kaniko
     settings: