Tomster/Synapse-Docker
1
0
Fork 0
mirror of https://github.com/tommytran732/Synapse-Docker synced 2024-11-24 17:31:33 -05:00
Code

Compare commits

base: Tomster:4ab1f2995733056ef0f5738da96efe33ae9ec872
Branches Tags
Tomster:main
..
compare: Tomster:7000a05a61666ffd76857b41f8ab7de0ee3ffacb
Branches Tags
Tomster:main

No commits in common. "4ab1f2995733056ef0f5738da96efe33ae9ec872" and "7000a05a61666ffd76857b41f8ab7de0ee3ffacb" have entirely different histories.
4ab1f29957 ... 7000a05a61

1 changed files with 11 additions and 11 deletions
Show Stats Expand all files Collapse all files

22
.github/workflows/build.yml vendored
View File

@ -19,7 +19,7 @@ env:
jobs: jobs:
build: build:
name: Build & push new image name: Build & push new image
runs-on: ubuntu-24.04 runs-on: "ubuntu-latest"
permissions: permissions:
contents: read contents: read
packages: write packages: write
@ -79,36 +79,36 @@ jobs:
needs: build needs: build
permissions: permissions:
security-events: write security-events: write
runs-on: ubuntu-24.04 runs-on: "ubuntu-latest"
steps: steps:
- name: Run Trivy vulnerability scanner - name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:
image-ref: ghcr.io/tommytran732/synapse image-ref: 'ghcr.io/tommytran732/synapse'
format: template format: 'template'
template: '@/contrib/sarif.tpl' template: '@/contrib/sarif.tpl'
output: trivy-results.sarif output: 'trivy-results.sarif'
severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
vuln-type: os,library vuln-type: "os,library"
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3 uses: github/codeql-action/upload-sarif@v3
with: with:
sarif_file: trivy-results.sarif sarif_file: 'trivy-results.sarif'
category: trivy category: 'trivy'
grype: grype:
name: Scan current image with Grype name: Scan current image with Grype
needs: build needs: build
permissions: permissions:
security-events: write security-events: write
runs-on: ubuntu-24.04 runs-on: "ubuntu-latest"
steps: steps:
- name: Run Grype vulnerability scanner - name: Run Grype vulnerability scanner
uses: anchore/scan-action@v4 uses: anchore/scan-action@v4
id: grype id: grype
with: with:
image: ghcr.io/tommytran732/synapse image: "ghcr.io/tommytran732/synapse"
fail-build: false fail-build: false
- name: Upload Grype scan results to GitHub Security tab - name: Upload Grype scan results to GitHub Security tab