rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add trivy docker scan

Browse Source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2025-05-16 18:27:40 -07:00
parent 6aa7be3773
commit f2caba94dd
1 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
.github/workflows/make.yaml vendored
View File

@@ -16,6 +16,11 @@ jobs:
permissions: permissions:
contents: "read" contents: "read"
packages: "write" packages: "write"
env:
DOCKER_BUILD_FLAGS: "--push"
DOCKER_TAG_NAME: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || 'latest' }}
TRIVY_SKIP_DB_UPDATE: "true"
TRIVY_SKIP_JAVA_DB_UPDATE: "true"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v4"
- uses: "docker/setup-qemu-action@v2" - uses: "docker/setup-qemu-action@v2"
@@ -26,9 +31,14 @@ jobs:
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- run: "make docker-build" - run: "make docker-build"
env: - uses: aquasecurity/trivy-action@0.28.0
DOCKER_BUILD_FLAGS: "--push" with:
DOCKER_TAG_NAME: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || 'latest' }} image-ref: 'ghcr.io/getprobo/probo:${{ env.DOCKER_TAG_NAME }}'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'
build: build:
name: "build" name: "build"
runs-on: "ubuntu-22.04" runs-on: "ubuntu-22.04"