You've already forked ddns-updater
github action + minor refactor
This commit is contained in:
19
.github/workflows/quality-checks.yml
vendored
19
.github/workflows/quality-checks.yml
vendored
@@ -76,3 +76,22 @@ jobs:
|
||||
echo "Failed"
|
||||
exit 1
|
||||
fi
|
||||
build:
|
||||
name: Image vulnerability scanner
|
||||
needs: [docker-lint, golangci]
|
||||
runs-on: ubuntu-20.04
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v3
|
||||
- name: Build an image from Dockerfile
|
||||
run: |
|
||||
docker build -t docker.io/my-organization/my-app:${{ github.sha }} .
|
||||
- name: Run Trivy vulnerability scanner
|
||||
uses: aquasecurity/trivy-action@master
|
||||
with:
|
||||
image-ref: 'docker.io/my-organization/my-app:${{ github.sha }}'
|
||||
format: 'table'
|
||||
exit-code: '1'
|
||||
ignore-unfixed: true
|
||||
vuln-type: 'os,library'
|
||||
severity: 'CRITICAL,HIGH'
|
||||
Reference in New Issue
Block a user