mirror of
https://github.com/mykitserver/docker-limesurvey.git
synced 2025-12-06 16:39:11 +01:00
Remove trivy scan (#97)
- It's too verbose and we currently don't have time to review everyting
This commit is contained in:
18
.github/workflows/test-lts-container-images.yaml
vendored
18
.github/workflows/test-lts-container-images.yaml
vendored
@@ -32,21 +32,3 @@ jobs:
|
||||
with:
|
||||
image: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
|
||||
config: tests/${{ matrix.context }}-tests.yaml
|
||||
|
||||
- name: 'Run vulnerability scanner'
|
||||
uses: aquasecurity/trivy-action@master
|
||||
with:
|
||||
image-ref: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
|
||||
format: 'template'
|
||||
template: '@/contrib/sarif.tpl'
|
||||
exit-code: '0'
|
||||
# Since we are not in charge of the Application
|
||||
vuln-type: 'os'
|
||||
output: trivy-results-3-${{ matrix.context }}.sarif
|
||||
severity: 'CRITICAL,HIGH'
|
||||
|
||||
- name: 'Upload Trivy scan results to GitHub'
|
||||
uses: github/codeql-action/upload-sarif@v1
|
||||
with:
|
||||
sarif_file: trivy-results-3-${{ matrix.context }}.sarif
|
||||
category: "${{ matrix.context }}"
|
||||
|
||||
Reference in New Issue
Block a user