mirror of
https://github.com/mykitserver/docker-limesurvey.git
synced 2025-12-06 16:39:11 +01:00
Remove trivy scan (#97)
- It's too verbose and we currently don't have time to review everyting
This commit is contained in:
@@ -32,21 +32,3 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
image: docker.io/martialblog/limesurvey:5-${{ matrix.context }}
|
image: docker.io/martialblog/limesurvey:5-${{ matrix.context }}
|
||||||
config: tests/${{ matrix.context }}-tests.yaml
|
config: tests/${{ matrix.context }}-tests.yaml
|
||||||
|
|
||||||
- name: 'Run vulnerability scanner'
|
|
||||||
uses: aquasecurity/trivy-action@master
|
|
||||||
with:
|
|
||||||
image-ref: docker.io/martialblog/limesurvey:5-${{ matrix.context }}
|
|
||||||
format: 'template'
|
|
||||||
template: '@/contrib/sarif.tpl'
|
|
||||||
exit-code: '0'
|
|
||||||
# Since we are not in charge of the Application
|
|
||||||
vuln-type: 'os'
|
|
||||||
output: trivy-results-5-${{ matrix.context }}.sarif
|
|
||||||
severity: 'CRITICAL,HIGH'
|
|
||||||
|
|
||||||
- name: 'Upload Trivy scan results to GitHub'
|
|
||||||
uses: github/codeql-action/upload-sarif@v1
|
|
||||||
with:
|
|
||||||
sarif_file: trivy-results-5-${{ matrix.context }}.sarif
|
|
||||||
category: "${{ matrix.context }}"
|
|
||||||
|
|||||||
18
.github/workflows/test-lts-container-images.yaml
vendored
18
.github/workflows/test-lts-container-images.yaml
vendored
@@ -32,21 +32,3 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
image: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
|
image: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
|
||||||
config: tests/${{ matrix.context }}-tests.yaml
|
config: tests/${{ matrix.context }}-tests.yaml
|
||||||
|
|
||||||
- name: 'Run vulnerability scanner'
|
|
||||||
uses: aquasecurity/trivy-action@master
|
|
||||||
with:
|
|
||||||
image-ref: docker.io/martialblog/limesurvey:3-${{ matrix.context }}
|
|
||||||
format: 'template'
|
|
||||||
template: '@/contrib/sarif.tpl'
|
|
||||||
exit-code: '0'
|
|
||||||
# Since we are not in charge of the Application
|
|
||||||
vuln-type: 'os'
|
|
||||||
output: trivy-results-3-${{ matrix.context }}.sarif
|
|
||||||
severity: 'CRITICAL,HIGH'
|
|
||||||
|
|
||||||
- name: 'Upload Trivy scan results to GitHub'
|
|
||||||
uses: github/codeql-action/upload-sarif@v1
|
|
||||||
with:
|
|
||||||
sarif_file: trivy-results-3-${{ matrix.context }}.sarif
|
|
||||||
category: "${{ matrix.context }}"
|
|
||||||
|
|||||||
Reference in New Issue
Block a user