diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 0c5a4a0..ac2ac43 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -9,8 +9,8 @@ on: paths-ignore: - '**.md' schedule: - # Build the image regularly (each Saturday) - - cron: '0 22 * * 6' + # Build the image daily + - cron: '0 0 * * *' env: REGISTRY: ghcr.io diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml deleted file mode 100644 index 44235fa..0000000 --- a/.github/workflows/scan.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: Scan - -on: - workflow_dispatch: - schedule: - # Scan the image regularly (once a day) - - cron: '0 23 * * *' - -jobs: - scan: - name: Scan current image & report results - permissions: - security-events: write - runs-on: "ubuntu-latest" - steps: - - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master - with: - image-ref: 'ghcr.io/tommytran732/matrix.to' - format: 'template' - template: '@/contrib/sarif.tpl' - output: 'trivy-results.sarif' - severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL' - vuln-type: "os,library" - - - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: 'trivy-results.sarif' \ No newline at end of file