Skip to content

Resolve 500 error with dissemination search/advanced (#4497) #1287

Resolve 500 error with dissemination search/advanced (#4497)

Resolve 500 error with dissemination search/advanced (#4497) #1287

Workflow file for this run

---
name: Trivy Scan
on:
workflow_dispatch:
workflow_call:
push:
branches:
- main
- prod
tags:
- v1.*
permissions:
contents: read
jobs:
trivy:
permissions:
contents: read
security-events: write
actions: read
env:
repo_name: gsa-tts/fac
DOCKER_NAME: fac
WORKING_DIRECTORY: ./backend
name: Trivy Scan FAC Web Container
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Get Date
shell: bash
id: date
run: |
echo "date=$(date +%Y%m%d%H%M%S)" >> $GITHUB_OUTPUT
- name: Build Container
working-directory: ${{ env.WORKING_DIRECTORY }}
run: docker build -t ${{ env.DOCKER_NAME }}:${{ steps.date.outputs.date }} .
- name: Run Trivy vulnerability scanner
uses: aquasecurity/[email protected]
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,ghcr.io/aquasecurity/trivy-db
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
TRIVY_SKIP_DB_UPDATE: true
TRIVY_SKIP_JAVA_DB_UPDATE: true
with:
image-ref: '${{ env.DOCKER_NAME }}:${{ steps.date.outputs.date }}'
scan-type: 'image'
hide-progress: false
format: 'sarif'
output: 'trivy-results.sarif'
exit-code: 0 # Setting the exit-code to 1 will fail the action, without publishing to Github Security Tab (> aquasecurity/[email protected])
severity: 'CRITICAL,HIGH'
timeout: 15m0s
ignore-unfixed: true
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: 'trivy-results.sarif'
scan-third-party:
permissions:
contents: read
security-events: write
actions: read
name: Trivy Scan Third Party Images
runs-on: ubuntu-latest
env:
repo_name: gsa-tts/fac
strategy:
fail-fast: false
matrix:
image:
- name: ghcr.io/gsa-tts/fac/postgrest:latest
- name: ghcr.io/gsa-tts/fac/clamav:latest
steps:
- name: Pull Third Party Docker Images
run: docker pull ${{ matrix.image.name }}
- name: Run Trivy vulnerability scanner on Third Party Images
uses: aquasecurity/[email protected]
env:
TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db,ghcr.io/aquasecurity/trivy-db
TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db,ghcr.io/aquasecurity/trivy-java-db
TRIVY_SKIP_DB_UPDATE: true
TRIVY_SKIP_JAVA_DB_UPDATE: true
with:
image-ref: '${{ matrix.image.name }}'
scan-type: 'image'
hide-progress: false
format: 'sarif'
output: 'trivy-results.sarif'
exit-code: 0 # Setting the exit-code to 1 will fail the action, without publishing to Github Security Tab (> aquasecurity/[email protected])
severity: 'CRITICAL,HIGH'
timeout: 15m0s
ignore-unfixed: true
- name: Upload Trivy scan results to GitHub Security tab for Third Party Images
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: 'trivy-results.sarif'