Skip to content

Commit

Permalink
chore(ci): checkout repo during trivy check
Browse files Browse the repository at this point in the history
  • Loading branch information
mkurapov committed Dec 6, 2024
1 parent 882beb5 commit 9d5ed74
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion .github/workflows/node-build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -326,6 +326,7 @@ jobs:
- backend
- frontend
steps:
- uses: actions/checkout@v4
- name: Fetch docker image from cache
uses: actions/cache/restore@v4
with:
Expand All @@ -338,7 +339,7 @@ jobs:
- name: Scan docker image
run: |
docker images
/tmp/trivy image --debug --ignorefile ${{ github.workspace }}/.trivyignore --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db --java-db-repository ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --format table --vuln-type os,library --exit-code 1 --severity HIGH --input /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar
/tmp/trivy image --debug --db-repository ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db --java-db-repository ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db --ignore-unfixed --format table --vuln-type os,library --exit-code 1 --severity HIGH --input /tmp/${{ github.sha }}-${{ matrix.package }}-${{ matrix.platform.name }}-${{ needs.version-generator.outputs.version }}.tar
push:
name: Push to registry
Expand Down

0 comments on commit 9d5ed74

Please sign in to comment.