img scan added

.github/workflows/ci-build.yaml

@@ -19,12 +19,6 @@ jobs:
 
  - name: create a custom tag 
  run: echo "IMG_TAG=$(echo $GITHUB_SHA | cut -c 1-6)"-$job_id >> $GITHUB_ENV
-
- - name: tag 
- run: echo "$IMG_TAG"
-
-
- # export IMG_TAG="$sha" | cut -c1-6
 
  - name: Set up Docker Buildx
  uses: docker/setup-buildx-action@v3
@@ -33,3 +27,14 @@ jobs:
  with:
  push: false
  tags: welcome-app:${{ env.IMG_TAG }}, welcome-app:${{ env.sha }}
+
+ # Image Scan
+ - name: KSOC Image Scan
+ uses: ksoclabs/[email protected]
+ with:
+ fail_on_severity: medium
+ ignore_cves: |
+ CVE-2021-1234
+ CVE-2021-5678
+ image: localbuild/testimage:latest
+