when:
  branch: main
pipeline:
  scan_vuln:
    image: woodpeckerci/plugin-trivy