-
Notifications
You must be signed in to change notification settings - Fork 12
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
f44a48a
commit bc4761d
Showing
12 changed files
with
26 additions
and
27 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -44,10 +44,10 @@ on: | |
type: string | ||
|
||
env: | ||
GPG_MAIL: '[email protected]' | ||
GPG_MAIL: "[email protected]" | ||
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} | ||
GPG_PRIVATE_KEY_BASE64: ${{ secrets.GPG_PRIVATE_KEY_BASE64 }} # base64 encoded | ||
TAG: ${{ inputs.TAG }} | ||
TAG: ${{ inputs.TAG }} | ||
DOCKER_HUB_ID: ${{ secrets.DOCKER_HUB_ID }} | ||
DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }} | ||
SCHEMA_BRANCH: ${{ inputs.SCHEMA_BRANCH }} | ||
|
@@ -67,7 +67,7 @@ env: | |
jobs: | ||
publish: | ||
name: Publish linux artifacts into s3 bucket | ||
runs-on: ubuntu-20.04 | ||
runs-on: ubuntu-latest | ||
|
||
strategy: | ||
max-parallel: 1 | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -18,26 +18,25 @@ on: | |
required: true | ||
type: string | ||
|
||
|
||
jobs: | ||
trivy_scanner: | ||
name: Trivy scanner for docker | ||
runs-on: ubuntu-20.04 | ||
runs-on: ubuntu-latest | ||
if: ${{ ! github.event.schedule }} # Table output | ||
steps: | ||
- name: newrelic/nr-otel-collector | ||
uses: aquasecurity/trivy-action@master | ||
with: | ||
image-ref: "${{ inputs.image }}:${{ inputs.tag }}" | ||
format: 'table' | ||
exit-code: '1' | ||
format: "table" | ||
exit-code: "1" | ||
ignore-unfixed: true | ||
vuln-type: 'os,library' | ||
vuln-type: "os,library" | ||
severity: "${{ inputs.severity }}" | ||
|
||
trivy_scanner_scheduled: | ||
name: Scheduled Trivy scanner for docker | ||
runs-on: ubuntu-20.04 | ||
runs-on: ubuntu-latest | ||
if: ${{ github.event.schedule }} # Upload sarif when running periodically | ||
steps: | ||
- name: Checkout | ||
|
@@ -47,18 +46,18 @@ jobs: | |
uses: aquasecurity/[email protected] | ||
with: | ||
image-ref: "${{ inputs.image }}:${{ inputs.tag }}" | ||
format: 'sarif' | ||
output: 'trivy-results.sarif' | ||
vuln-type: 'os,library' | ||
format: "sarif" | ||
output: "trivy-results.sarif" | ||
vuln-type: "os,library" | ||
severity: "${{ inputs.severity }}" | ||
exit-code: '1' | ||
exit-code: "1" | ||
ignore-unfixed: true | ||
|
||
- name: Upload Trivy scan results to GitHub Security tab | ||
uses: github/codeql-action/upload-sarif@v2 | ||
if: ${{ always() }} | ||
with: | ||
sarif_file: 'trivy-results.sarif' | ||
sarif_file: "trivy-results.sarif" | ||
|
||
- name: Send notification to Slack Workflow | ||
if: ${{ failure() }} | ||
|