Merge pull request #4049 from cisagov/feature/add-trivy-scanner

feature: add Trivy scanner

.github/workflows/trivy-analysis.yml

@@ -0,0 +1,50 @@
+name: Trivy Scanner
+on:
+  push:
+    branches:
+      - develop
+  pull_request:
+jobs:
+  dotnet:
+    name: .NET Analysis
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run vulnerability scanner
+        uses: aquasecurity/[email protected]
+        with:
+          format: "sarif"
+          output: "trivy-dotnet-results.sarif"
+          scan-type: "fs"
+          scan-ref: "./CSETWebApi"
+          severity: "CRITICAL,HIGH"
+
+      - name: Upload scan results to Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          category: ".NET"
+          sarif_file: "trivy-dotnet-results.sarif"
+
+  nodejs:
+    name: Node.js Analysis
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run vulnerability scanner
+        uses: aquasecurity/[email protected]
+        with:
+          format: "sarif"
+          output: "trivy-nodejs-results.sarif"
+          scan-type: "fs"
+          scan-ref: "./CSETWebNg"
+          severity: "CRITICAL,HIGH"
+
+      - name: Upload scan results to Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          category: "Node.js"
+          sarif_file: "trivy-nodejs-results.sarif"

CSETWebNg/src/app/main.ts

@@ -26,6 +26,7 @@ import { platformBrowserDynamic } from '@angular/platform-browser-dynamic';
 import { AppModule } from './app.module';
 import { environment } from '../environments/environment';
 
+
 if (environment.production) {
     enableProdMode();
 }