Skip to content

Bump aquasecurity/trivy-action from 0.12.0 to 0.15.0 #162

Bump aquasecurity/trivy-action from 0.12.0 to 0.15.0

Bump aquasecurity/trivy-action from 0.12.0 to 0.15.0 #162

Workflow file for this run

name: ci-simple
permissions:
contents: read
on:
pull_request:
jobs:
container:
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v4
with:
submodules: true
- name: prepare environment variables
run: |
shortSha=`echo ${GITHUB_SHA} | cut -c1-7`
echo "IMAGE_NAME=acm-workshop:$shortSha" >> $GITHUB_ENV
- name: build container
run: |
cd app
docker build --tag ${IMAGE_NAME} .
- name: dockle
run: |
docker run -v /var/run/docker.sock:/var/run/docker.sock --rm goodwithtech/dockle:latest -ak KEY_SHA512 --exit-code 1 --exit-level fatal ${IMAGE_NAME}
- name: run container locally as a test
run: |
docker run -d -p 8080:8080 --read-only --cap-drop=ALL --user=1000 ${IMAGE_NAME}
chart:
needs: container
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v4
- name: helm lint
run: |
helm lint chart/ --strict
helm template chart/ > helm-output.yaml
kustomize create --resources helm-output.yaml
kustomize build .