Restore scan in CI-PR and Provide alternative Trivy repo. (#579)
Added enviromental variables with multiple trivy repos. Restore scan after build.
This commit is contained in:
committed by
GitHub
parent
ade14a5953
commit
3266b47a83
9
.github/workflows/ci-pr.yml
vendored
9
.github/workflows/ci-pr.yml
vendored
@@ -12,6 +12,8 @@ env:
|
||||
ARTIFACTORY_USERNAME: 'anonymous'
|
||||
ARTIFACTORY_PASSWORD: 'anonymous'
|
||||
SKIP_DEPLOY: 'true'
|
||||
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
|
||||
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
|
||||
|
||||
jobs:
|
||||
build:
|
||||
@@ -59,6 +61,13 @@ jobs:
|
||||
VERBOSE: ${{ github.debug && 'true' || '' }}
|
||||
run: |
|
||||
./build-apps.sh "-T 1C package -Psnapshot"
|
||||
- name: 'Configure: Install Trivy'
|
||||
uses: ./.github/actions/install-trivy
|
||||
- name: 'Action: Trivy scan'
|
||||
shell: bash
|
||||
run: |
|
||||
BUILD_DIR=$(realpath $MAIN_PATH)
|
||||
$BUILD_DIR/scan-folders.sh table
|
||||
- name: 'Upload: Error logs'
|
||||
if: ${{ failure() }}
|
||||
uses: actions/upload-artifact@v3
|
||||
|
||||
Reference in New Issue
Block a user