From 6adac6651144a0ad95b8e7d1b3196a18cb6f8155 Mon Sep 17 00:00:00 2001 From: bhashinee Date: Tue, 10 Oct 2023 09:47:13 +0530 Subject: [PATCH 1/2] Disable Trivy scan --- .github/workflows/publish-release.yml | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index 5e7f24ab82..dd6f519888 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -28,14 +28,15 @@ jobs: ./gradlew build -x check -x test - name: Create lib directory if not exists run: mkdir -p ballerina/lib - - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master - with: - scan-type: 'rootfs' - scan-ref: '/github/workspace/ballerina/lib' - format: 'table' - timeout: '10m0s' - exit-code: '1' +# Disabling Trivy scan for now for an urgent release as it is failing due to a vulnerability in Netty which is not fixed yet. +# - name: Run Trivy vulnerability scanner +# uses: aquasecurity/trivy-action@master +# with: +# scan-type: 'rootfs' +# scan-ref: '/github/workspace/ballerina/lib' +# format: 'table' +# timeout: '10m0s' +# exit-code: '1' - name: Set version env variable run: echo "VERSION=$((grep -w 'version' | cut -d= -f2) < gradle.properties | rev | cut --complement -d- -f1 | rev)" >> $GITHUB_ENV - name: Pre release dependency version update From 40377e1f90dd46273adada63267502ce8fc28167 Mon Sep 17 00:00:00 2001 From: bhashinee Date: Tue, 10 Oct 2023 11:32:24 +0530 Subject: [PATCH 2/2] Disable trivy in central-publish.yml --- .github/workflows/central-publish.yml | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/.github/workflows/central-publish.yml b/.github/workflows/central-publish.yml index 6c2e980a16..0b8e5d3f20 100644 --- a/.github/workflows/central-publish.yml +++ b/.github/workflows/central-publish.yml @@ -31,14 +31,15 @@ jobs: run: ./gradlew build -x check -x test - name: Create lib directory if not exists run: mkdir -p ballerina/lib - - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master - with: - scan-type: 'rootfs' - scan-ref: '/github/workspace/ballerina/lib' - format: 'table' - timeout: '10m0s' - exit-code: '1' +# Disabling Trivy scan for now for an urgent release as it is failing due to a vulnerability in Netty which is not fixed yet. +# - name: Run Trivy vulnerability scanner +# uses: aquasecurity/trivy-action@master +# with: +# scan-type: 'rootfs' +# scan-ref: '/github/workspace/ballerina/lib' +# format: 'table' +# timeout: '10m0s' +# exit-code: '1' - name: Ballerina Central Push if: ${{ github.event.inputs.environment == 'CENTRAL' }}