feat(trivy): add trivy to dagger and cause issues

dagger/package.json

@@ -1,8 +1,8 @@
 {
   "type": "module",
   "dependencies": {
-    "typescript": "^5.5.4",
-    "@dagger.io/dagger": "./sdk"
+    "@dagger.io/dagger": "./sdk",
+    "typescript": "^5.5.4"
   },
   "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
 }

dagger/src/index.ts

@@ -1,7 +1,14 @@
 /**
  * Dagger build and deploy functions
  */
-import { dag, Container, Directory, object, func } from "@dagger.io/dagger";
+import {
+  dag,
+  Container,
+  Directory,
+  File,
+  object,
+  func,
+} from "@dagger.io/dagger";
 
 @object()
 class HelloDagger {
@@ -27,11 +34,20 @@ class HelloDagger {
    */
   @func()
   async test(source: Directory): Promise<string> {
+    // TODO return error code?
     return this.buildEnv(source).withExec(["go", "test"]).stdout();
   }
 
   /**
-   * Build a ready-to-use development environment
+   * Run trivy on the source code
+   */
+  @func()
+  async securityScan(source: Directory): Promise<string> {
+    return dag.trivy().fs(source).contents();
+  }
+
+  /**
+   * Run golandci-lint on the project
    */
   @func()
   lint(source: Directory): Container {
@@ -40,8 +56,7 @@ class HelloDagger {
       .from("golangci/golangci-lint:v1.61.0")
       .withDirectory("/src", source)
       .withWorkdir("/src")
-      .withExec(["golangci-lint", "run", "-v"])
-      ;
+      .withExec(["golangci-lint", "run", "-v"]);
   }
 
   /**