SpringCloud/stream-applications
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update Trivy env in common.yml

Browse Source 
Added trivy env to each specific Trivy job step.
This commit is contained in:
Corneil du Plessis
2024-11-19 14:20:20 +02:00
committed by GitHub
parent 0682b79208
commit 86ed0fa3b3
1 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
.github/workflows/common.yml vendored
View File

@@ -39,9 +39,7 @@ on:
env:
VERBOSE: ${{ (github.debug || inputs.verbose) && 'true' || '' }}
BRANCH: ${{ inputs.branch }}
MAVEN_THREADS: ${{ inputs.mavenThreads }}
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
MAVEN_THREADS: ${{ inputs.mavenThreads }}
jobs:
parameters:
@@ -365,6 +363,9 @@ jobs:
if: ${{ inputs.enableSecurityScan }}
shell: bash
id: scan
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
run: |
ROOT_DIR=$(realpath $PWD)
pushd stream-applications > /dev/null
@@ -508,6 +509,9 @@ jobs:
if: ${{ inputs.enableSecurityScan }}
shell: bash
id: scan
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
run: |
ROOT_DIR=$(realpath $PWD)
pushd stream-applications > /dev/null
@@ -660,6 +664,9 @@ jobs:
if: ${{ inputs.enableSecurityScan }}
shell: bash
id: scan
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,aquasec/trivy-db,ghcr.io/aquasecurity/trivy-db
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,aquasec/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
run: |
ROOT_DIR=$(realpath $PWD)
pushd stream-applications > /dev/null