From 1cbb3b4b154ffd08892d27def08396f5fdf19e2c Mon Sep 17 00:00:00 2001 From: Mark Ridgwell Date: Fri, 31 Jan 2025 00:33:10 +0000 Subject: [PATCH] [Actions] Updated .github/actions/docker-image-test/action.yml --- .github/actions/docker-image-test/action.yml | 62 +++++++++++--------- 1 file changed, 33 insertions(+), 29 deletions(-) diff --git a/.github/actions/docker-image-test/action.yml b/.github/actions/docker-image-test/action.yml index dc4663fc..b8adf1b9 100644 --- a/.github/actions/docker-image-test/action.yml +++ b/.github/actions/docker-image-test/action.yml @@ -16,36 +16,40 @@ inputs: runs: using: "composite" steps: - - name: "Create SBOM" - uses: anchore/sbom-action@v0.15.10 - with: - github-token: ${{inputs.GITHUB_TOKEN}} - format: spdx-json - output-file: "${{ github.event.repository.name }}-sbom.spdx.json" - config: "${{ github.workspace }}.github/linters/syft.yml" + - name: "Wouldn't it be nice if all these things worked" + shell: bash + run: echo "Urrgh" - - name: "Scan SBOM" - uses: anchore/scan-action@v3.6.4 - with: - sbom: "${{ github.event.repository.name }}-sbom.spdx.json" - fail-build: false - output-format: table - severity-cutoff: medium - only-fixed: true - add-cpes-if-none: false - by-cve: false - - - name: "Run Grype vulnerability scanner" - if: always() - uses: anchore/scan-action@v3.6.4 - with: - image: "${{inputs.APP_OWNER}}/${{inputs.APP_NAME}}:test" - fail-build: true - output-format: table - severity-cutoff: medium - only-fixed: true - add-cpes-if-none: false - by-cve: false +# - name: "Create SBOM" +# uses: anchore/sbom-action@v0.18.0 +# with: +# github-token: ${{inputs.GITHUB_TOKEN}} +# format: spdx-json +# output-file: "${{ github.event.repository.name }}-sbom.spdx.json" +# config: "${{ github.workspace }}.github/linters/syft.yml" +# +# - name: "Scan SBOM" +# uses: anchore/scan-action@v6.1.0 +# with: +# sbom: "${{ github.event.repository.name }}-sbom.spdx.json" +# fail-build: false +# output-format: table +# severity-cutoff: medium +# only-fixed: true +# add-cpes-if-none: false +# by-cve: false +# +# - name: "Run Grype vulnerability scanner" +# if: always() +# uses: anchore/scan-action@v6.1.0 +# with: +# image: "${{inputs.APP_OWNER}}/${{inputs.APP_NAME}}:test" +# fail-build: true +# output-format: table +# severity-cutoff: medium +# only-fixed: true +# add-cpes-if-none: false +# by-cve: false # - name: "Run Dockle vulnerability scanner" # if: always()