daenamnu/discordeno
1
0
Fork 0
mirror of https://github.com/discordeno/discordeno.git synced 2026-09-17 08:47:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(rest-proxy): add image scan on push to main (#3046)

Browse Source
This commit is contained in:
Jonathan Ho
2023-06-06 01:46:39 +00:00
committed by GitHub
parent 6ea65c70e3
commit abfa0bb8fb
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/rest-proxy.yml
+4 -4
View File
@@ -80,7 +80,7 @@ jobs:
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
- name: Run Trivy vulnerability scanner - name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
if: ${{ github.event_name == 'schedule' }} if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
with: with:
image-ref: 'discordeno/rest-proxy:latest' image-ref: 'discordeno/rest-proxy:latest'
exit-code: '0' exit-code: '0'
@@ -90,12 +90,12 @@ jobs:
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2 uses: github/codeql-action/upload-sarif@v2
if: ${{ github.event_name == 'schedule' }} if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
with: with:
sarif_file: 'trivy-results.sarif' sarif_file: 'trivy-results.sarif'
- name: Run Snyk to check Docker image for vulnerabilities - name: Run Snyk to check Docker image for vulnerabilities
if: ${{ github.event_name == 'schedule' }} if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
continue-on-error: true continue-on-error: true
uses: snyk/actions/docker@master uses: snyk/actions/docker@master
env: env:
@@ -104,7 +104,7 @@ jobs:
image: 'discordeno/rest-proxy:latest' image: 'discordeno/rest-proxy:latest'
args: --file=proxies/rest/Dockerfile args: --file=proxies/rest/Dockerfile
- name: Upload result to GitHub Code Scanning - name: Upload result to GitHub Code Scanning
if: ${{ github.event_name == 'schedule' }} if: ${{ github.event_name == 'schedule' || github.event_name == 'push' }}
uses: github/codeql-action/upload-sarif@v2 uses: github/codeql-action/upload-sarif@v2
with: with:
sarif_file: snyk.sarif sarif_file: snyk.sarif