Merge pull request #25 from IABTechLab/gdm-UID2-3154-secret-scanning

Added build-and-test vuln scanning
IABTechLab · Apr 29, 2024 · 70e0606 · 70e0606
2 parents 2b885d5 + 151be0e
commit 70e0606
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml
@@ -0,0 +1,10 @@
+name: Build and Test
+on: [pull_request, push, workflow_dispatch]
+
+jobs:
+  build:
+    uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-build-and-test.yaml@v2
+    secrets: inherit
+    with:
+      vulnerability_scan_only: true
+      publish_vulnerabilities: false
diff --git a/.trivyignore b/.trivyignore
@@ -0,0 +1,5 @@
+# List any vulnerability that are to be accepted
+# See https://aquasecurity.github.io/trivy/v0.35/docs/vulnerability/examples/filter/ 
+# for more details
+# e.g. 
+# CVE-2022-3996