add scheduler to trivy action

wmo-im · Jan 9, 2025 · af06fdd · af06fdd
1 parent 0a0f77b
commit af06fdd
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -1,6 +1,9 @@
 name: Run Trivy vulnerability scanner
 
-on: [ push ]
+on:
+  push:
+  schedule:
+    - cron: '0 8 * * *'  # runs daily at 8h UTC
 
 jobs:
   main:
@@ -23,4 +26,4 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os,library'
           severity: 'CRITICAL,HIGH'
-          ignorefile: '.trivyignore'
+          ignorefile: '.trivyignore'