Update sdle-scans.yaml #11

	name: SDLE Scans

	on:
	workflow_dispatch:
	push:
	branches: [ main ]
	pull_request:

	jobs:

	# -----------------------------
	# 1) Trivy Scan (fixed)
	# -----------------------------
	trivy_scan:
	name: Trivy Vulnerability Scan
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Run Trivy FS Scan
	uses: aquasecurity/trivy-action@0.24.0
	with:
	scan-type: fs
	scan-ref: .
	format: json
	output: trivy-report.json
	severity: CRITICAL,HIGH
	ignore-unfixed: true

	- name: Upload Trivy Report
	uses: actions/upload-artifact@v4
	with:
	name: trivy-report
	path: trivy-report.json

	# -----------------------------
	# 2) Bandit Scan
	# -----------------------------
	bandit_scan:
	name: Bandit Python Static Scan
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-python@v5
	with:
	python-version: "3.x"

	- name: Install Bandit
	run: pip install bandit

	- name: Run Bandit
	run: bandit -r . -f html -o bandit-report.html \|\| true

	- name: Upload Bandit Report
	uses: actions/upload-artifact@v4
	with:
	name: bandit-report
	path: bandit-report.html

Navigation Menu