[CI] Schedule Trivy scan for maintenance branches
This commit is contained in:
25
.github/workflows/trivy-scan-dispatcher-1.0.x.yml
vendored
Normal file
25
.github/workflows/trivy-scan-dispatcher-1.0.x.yml
vendored
Normal file
@@ -0,0 +1,25 @@
|
||||
name: Trivy Vulnerability Scan (Repo mode) Dispatcher (1.0.x)
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 15 * * */3' # Once every 3 day at 15:00 UTC
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
dispatch_trivy_workflow:
|
||||
name: Dispatch scan workflow
|
||||
if: github.repository == 'spring-projects/spring-pulsar'
|
||||
strategy:
|
||||
matrix:
|
||||
# List of active maintenance branches.
|
||||
branch: [ 1.0.x ]
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
fetch-depth: 1
|
||||
- name: Dispatch
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
|
||||
run: gh workflow run trivy-scan.yml -r ${{ matrix.branch }}
|
||||
25
.github/workflows/trivy-scan-dispatcher-1.1.x.yml
vendored
Normal file
25
.github/workflows/trivy-scan-dispatcher-1.1.x.yml
vendored
Normal file
@@ -0,0 +1,25 @@
|
||||
name: Trivy Vulnerability Scan (Repo mode) Dispatcher (1.1.x)
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 16 * * */3' # Once every 3 day at 16:00 UTC
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
dispatch_trivy_workflow:
|
||||
name: Dispatch scan workflow
|
||||
if: github.repository == 'spring-projects/spring-pulsar'
|
||||
strategy:
|
||||
matrix:
|
||||
# List of active maintenance branches.
|
||||
branch: [ 1.1.x ]
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
fetch-depth: 1
|
||||
- name: Dispatch
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
|
||||
run: gh workflow run trivy-scan.yml -r ${{ matrix.branch }}
|
||||
2
.github/workflows/trivy-scan.yml
vendored
2
.github/workflows/trivy-scan.yml
vendored
@@ -26,7 +26,7 @@ on:
|
||||
required: false
|
||||
type: boolean
|
||||
schedule:
|
||||
- cron: '0 14 * * */3' # Once every 3 day at 2pm UTC
|
||||
- cron: '0 14 * * */3' # Once every 3 day at 14:00 UTC
|
||||
|
||||
jobs:
|
||||
run_trivy_scan:
|
||||
|
||||
Reference in New Issue
Block a user