diff --git a/.github/workflows/golang-ci.yml b/.github/workflows/golang-ci.yml
index a74e3136..2df43eb0 100644
--- a/.github/workflows/golang-ci.yml
+++ b/.github/workflows/golang-ci.yml
@@ -1,4 +1,4 @@
-name: Github Actions - Golang
+name: Github Actions - Shifter
 on:
   pull_request:
     paths:
@@ -12,7 +12,7 @@ defaults:
     working-directory: ./shifter
 
 jobs:
-  golang-ci-workflow:
+  shifter-ci-workflow:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/setup-go@v3
@@ -33,7 +33,19 @@ jobs:
       with:
         sarif_file: results.sarif    
     - name: Run Build
-      run:  make build       
+      run:  make build   
+    - name: Run Trivy vulnerability scanner
+      uses: aquasecurity/trivy-action@master
+      with:
+        image-ref: 'us-docker.pkg.dev/shifter-lz-002/dev-shifter/${{ github.head_ref || github.ref_name }}/shifter'
+        format: 'sarif'
+        output: 'trivy-results.sarif'
+
+    - name: Upload Trivy scan results to GitHub Security tab
+      uses: github/codeql-action/upload-sarif@v2
+      if: always()
+      with:
+        sarif_file: 'trivy-results.sarif'
 
 
 #     ## we can update once we have unit testcases inplace
diff --git a/shifter/generator/helm.go b/shifter/generator/helm.go
index 191e519c..1d19b7fd 100644
--- a/shifter/generator/helm.go
+++ b/shifter/generator/helm.go
@@ -24,7 +24,7 @@ import (
 
 	"gopkg.in/yaml.v3"
 	json "k8s.io/apimachinery/pkg/runtime/serializer/json"
-	//"strconv"
+	// "strconv"
 )
 
 type Chart struct {