From 4b68f13817e480fcabafcd9e21b06a83ec71bbad Mon Sep 17 00:00:00 2001
From: Chris Bono <chris.bono@gmail.com>
Date: Fri, 22 Nov 2024 12:51:00 -0600
Subject: [PATCH] [CI] Re-enable Trivy scan in ci-pr.yml

Also set scan by default in ci.yml
---
 .github/workflows/ci-pr.yml | 7 ++++++-
 .github/workflows/ci.yml    | 2 +-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index 9cf768f0..1dcdd67f 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -99,9 +99,14 @@ jobs:
               -PspringPulsarVersion="$VERSION" \
               -PspringBootVersion="$BOOT_VERSION" \
               :runAllSampleTests
+  scan:
+    needs: [prerequisites]
+    if: needs.prerequisites.outputs.runjobs
+    uses: ./.github/workflows/trivy-scan.yml
+
   done:
     runs-on: ubuntu-latest
-    needs: [ build_and_verify, check_samples ]
+    needs: [ build_and_verify, check_samples, scan ]
     steps:
       - name: 'Done'
         shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c255a879..701a24b5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ on:
     inputs:
       run-trivy-scan:
         description: 'Run Trivy scan ?'
-        default: false
+        default: true
         required: false
         type: boolean