skip-github.yml

name: skip-github
on:
  push:
    branches: ["main"]
  pull_request:
    branches: ["main"]


jobs:
  build:
    name: Build
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
        
      - name: Run Trivy scanner
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'fs'
          hide-progress: true
          output: trivy.txt
      
      - name: Publish Trivy Output to Summary
        run: |
          if [[ -s trivy.txt ]]; then
            {
              echo "### Security Output"
              echo "<details><summary>Click to expand</summary>"
              echo ""
              echo '```terraform'
              cat trivy.txt
              echo '```'
              echo "</details>"
            } >> $GITHUB_STEP_SUMMARY
          fi
          
      - name: Trivy Scan and Report to PR
        uses: domstolene/trivy-pr-report@v1
        with:
          github_token: ${{ github.token }}