ci-frontend-vulnerability-scans.yml

# GitHub Actions CI workflow that runs vulnerability scans on the application's Docker image
# to ensure images built are secure before they are deployed.

name: CI Frontend Vulnerability Scans

on:
  pull_request:
    paths:
      - .grype.yml
      - .hadolint.yaml
      - .trivyignore
      - .github/workflows/vulnerability-scans.yml
      - frontend/Dockerfile
      - frontendpi/package.json
      - frontend/package-lock.json

jobs:
  vulnerability-scans:
    name: Vulnerability Scans
    uses: ./.github/workflows/vulnerability-scans.yml
    with:
      app_name: frontend