Remove trivy scan (#97)

- It's too verbose and we currently don't have time to review everyting
This commit is contained in:
Markus Opolka
2021-10-18 09:47:55 +02:00
committed by GitHub
parent 633893f9a8
commit d6af8e0a03
2 changed files with 0 additions and 36 deletions

View File

@@ -32,21 +32,3 @@ jobs:
with:
image: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
config: tests/${{ matrix.context }}-tests.yaml
- name: 'Run vulnerability scanner'
uses: aquasecurity/trivy-action@master
with:
image-ref: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
format: 'template'
template: '@/contrib/sarif.tpl'
exit-code: '0'
# Since we are not in charge of the Application
vuln-type: 'os'
output: trivy-results-3-${{ matrix.context }}.sarif
severity: 'CRITICAL,HIGH'
- name: 'Upload Trivy scan results to GitHub'
uses: github/codeql-action/upload-sarif@v1
with:
sarif_file: trivy-results-3-${{ matrix.context }}.sarif
category: "${{ matrix.context }}"