Tomster/Matrix.to-Docker
1
0
Fork 0
mirror of https://github.com/tommytran732/Matrix.to-Docker synced 2024-11-22 10:01:34 -05:00
Code

Scan after build

Browse Source
This commit is contained in:
Tommy 2023-04-21 22:14:09 -04:00 committed by GitHub
parent e7b51aa5b9
commit a8405c6d7b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
.github/workflows/build.yml vendored
View File

@ -18,7 +18,7 @@ env:
jobs:
build:
name: Build, scan & push
name: Build & push new image
runs-on: "ubuntu-latest"
permissions:
contents: read
@ -67,3 +67,26 @@ jobs:
env:
COSIGN_EXPERIMENTAL: "true"
TAGS: ${{ steps.meta.outputs.tags }}
scan:
name: Scan current image & report results
needs: build
runs-on: "ubuntu-latest"
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'ghcr.io/tommytran732/synapse'
format: 'template'
template: '@/contrib/sarif.tpl'
output: 'trivy-results.sarif'
severity: 'CRITICAL,HIGH'
vuln-type: "os"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'trivy-results.sarif'