From 100f4c90ecb4a44e12cd965e2b51e48ba2664d7b Mon Sep 17 00:00:00 2001 From: Iliyan Vutoff Date: Mon, 13 Nov 2023 17:58:27 +0200 Subject: [PATCH] Update README --- M1-4-2-CI-Practice/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/M1-4-2-CI-Practice/README.md b/M1-4-2-CI-Practice/README.md index 09e073e6..5f342dcb 100644 --- a/M1-4-2-CI-Practice/README.md +++ b/M1-4-2-CI-Practice/README.md @@ -10,7 +10,7 @@ Create a GitHub Actions pipeline that runs on commit to a feature branch (i.e. n - Check for hardcoded secrets (`gitleaks`) - not just our app but the whole repository. - SAST - SonarCloud; Review code smells and security issues - SCA - Snyk; review security issues -- Build a Docker image +- Build a Docker image. Use Git commit SHA as an Image tag. - Scan the built image with `Trivy` - Push the built image to your Docker HUB account