Skip to content

Commit 1d5bf94

Browse files
committed
use gokakashi instead of trivy for image scanning
1 parent 4352bc5 commit 1d5bf94

File tree

1 file changed

+11
-6
lines changed

1 file changed

+11
-6
lines changed

.github/workflows/build.yaml

+11-6
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
path: ${{ env.tar_file }}
6060
retention-days: 1
6161

62-
scan-docker-image-with-trivy:
62+
scan-docker-image-with-gokakashi:
6363
needs: build-docker-image
6464
runs-on: ubuntu-latest
6565
steps:
@@ -72,10 +72,15 @@ jobs:
7272
run: |
7373
docker load -i ${{ needs.build-docker-image.outputs.tar_file }}
7474
75-
- name: Run Trivy vulnerability scan
76-
uses: aquasecurity/trivy-action@master
75+
- name: Scan docker image with gokakashi
76+
uses: shinobistack/gokakashi-action@v0.1.1
7777
with:
7878
image-ref: '${{ needs.build-docker-image.outputs.image_name }}'
79-
format: 'table'
80-
exit-code: 1
81-
severity: 'CRITICAL,HIGH'
79+
labels: agentKey=${{ github.run_id }}
80+
policy: ci-platform
81+
server: https://gokakashi-server.hasura-app.io
82+
token: ${{ secrets.GOKAKASHI_API_TOKEN }}
83+
cf_client_id: ${{ secrets.CF_ACCESS_CLIENT_ID }}
84+
cf_client_secret: ${{ secrets.CF_ACCESS_CLIENT_SECRET }}
85+
interval: 10
86+
retries: 8

0 commit comments

Comments
 (0)