sig_cloud/sig-cloud-instance-images
6
0
Fork 0
mirror of https://github.com/rocky-linux/sig-cloud-instance-images.git synced 2024-12-18 15:18:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12 from rocky-linux/scanning

Browse Source 
save results publicly
This commit is contained in:
Neil Hanlon 2022-03-25 10:01:33 -04:00 committed by GitHub
commit 7312f86c8b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
.github/workflows/scan.yml vendored
View File

@ -31,3 +31,22 @@ jobs:
if: always() if: always()
with: with:
sarif_file: 'trivy-results.sarif' sarif_file: 'trivy-results.sarif'
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
if: always()
with:
image-ref: 'docker.io/library/rockylinux:8'
format: 'table'
output: 'trivy-results'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH,MEDIUM'
- name: Save scan results as an artifact
uses: actions/upload-artifact@v3
if: always()
with:
name: 'trivy-results'
path: 'trivy-results'