diff --git a/.github/workflows/scan-docker-images-skip.yml b/.github/workflows/scan-docker-images-skip.yml deleted file mode 100644 index 6b6c9c13f..000000000 --- a/.github/workflows/scan-docker-images-skip.yml +++ /dev/null @@ -1,14 +0,0 @@ -name: "Scan docker images from the allowed docker images list" - -on: - pull_request: - paths: - - '**.md' - - 'library-and-framework-list*.json' - -jobs: - build: - name: "🔎 Scan docker images" - runs-on: ubuntu-latest - steps: - - run: 'echo "No build required"' diff --git a/.github/workflows/scan-docker-images.yml b/.github/workflows/scan-docker-images.yml index a1686b28c..10807de2a 100644 --- a/.github/workflows/scan-docker-images.yml +++ b/.github/workflows/scan-docker-images.yml @@ -1,10 +1,13 @@ name: "Scan docker images from the allowed docker images list" on: + # we should run this job if somebody wants to add/update allowed docker images pull_request: - paths-ignore: - - '**.md' - - 'library-and-framework-list*.json' + paths: + - 'tests/tck-build-logic/src/main/resources/allowed-docker-images' + # we should run this job once a week to check if new vulnerabilities are found in existing images + schedule: + - chron: "0 0 * * 6" jobs: scan-images: