Skip to content

Commit

Permalink
[Actions] Updated .github/actions/docker-image-test/action.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
credfeto committed Jan 31, 2025
1 parent c0cf456 commit 1cbb3b4
Showing 1 changed file with 33 additions and 29 deletions.
62 changes: 33 additions & 29 deletions .github/actions/docker-image-test/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,36 +16,40 @@ inputs:
runs:
using: "composite"
steps:
- name: "Create SBOM"
uses: anchore/[email protected]
with:
github-token: ${{inputs.GITHUB_TOKEN}}
format: spdx-json
output-file: "${{ github.event.repository.name }}-sbom.spdx.json"
config: "${{ github.workspace }}.github/linters/syft.yml"
- name: "Wouldn't it be nice if all these things worked"
shell: bash
run: echo "Urrgh"

- name: "Scan SBOM"
uses: anchore/[email protected]
with:
sbom: "${{ github.event.repository.name }}-sbom.spdx.json"
fail-build: false
output-format: table
severity-cutoff: medium
only-fixed: true
add-cpes-if-none: false
by-cve: false

- name: "Run Grype vulnerability scanner"
if: always()
uses: anchore/[email protected]
with:
image: "${{inputs.APP_OWNER}}/${{inputs.APP_NAME}}:test"
fail-build: true
output-format: table
severity-cutoff: medium
only-fixed: true
add-cpes-if-none: false
by-cve: false
# - name: "Create SBOM"
# uses: anchore/[email protected]
# with:
# github-token: ${{inputs.GITHUB_TOKEN}}
# format: spdx-json
# output-file: "${{ github.event.repository.name }}-sbom.spdx.json"
# config: "${{ github.workspace }}.github/linters/syft.yml"
#
# - name: "Scan SBOM"
# uses: anchore/[email protected]
# with:
# sbom: "${{ github.event.repository.name }}-sbom.spdx.json"
# fail-build: false
# output-format: table
# severity-cutoff: medium
# only-fixed: true
# add-cpes-if-none: false
# by-cve: false
#
# - name: "Run Grype vulnerability scanner"
# if: always()
# uses: anchore/[email protected]
# with:
# image: "${{inputs.APP_OWNER}}/${{inputs.APP_NAME}}:test"
# fail-build: true
# output-format: table
# severity-cutoff: medium
# only-fixed: true
# add-cpes-if-none: false
# by-cve: false

# - name: "Run Dockle vulnerability scanner"
# if: always()
Expand Down

0 comments on commit 1cbb3b4

Please sign in to comment.