sample.yml

name: CI/CD Pipeline

on:
  push:
    branches: [dev]

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Install Trivy
        run: |
          wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
          echo "deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main" | sudo tee -a /etc/apt/sources.list.d/trivy.list
          sudo apt-get update
          sudo apt-get install trivy
          pwd

      - name: Scan files with Trivy
        run: |
          trivy fs . > trivy-files.txt
          ls -lah

      - name: Send scan reports via email
        run: |
          echo "Scan report attached." > body.txt
          echo "From: abhilash.dube@tekditechnologies.com" > email.txt
          echo "To: abhilash.dube@tekditechnologies.com" >> email.txt
          echo "Subject: Trivy Scan Report" >> email.txt
          echo "Content-Type: text/plain; charset=UTF-8" >> email.txt
          echo "" >> email.txt
          cat body.txt >> email.txt
          sudo apt-get update
          sudo apt-get install -y mutt
          mutt -s "Trivy Scan Report" -a /home/runner/work/rc-ewallet/rc-ewallet/trivy-files.txt -- abhilash.dube@tekditechnologies.com < email.txt
        env:
          SMTP_SERVER: smtp.gmail.com
          SMTP_PORT: 465
          SMTP_USERNAME: abhilash.dube@tekditechnologies.com
          SMTP_PASSWORD: ${{ secrets.SMTP_PASSWORD }}