Skip to content

Trivy

Trivy #424

Workflow file for this run

name: Trivy
on:
workflow_dispatch:
schedule:
- cron: '0 0 * * *'
jobs:
ubuntu_build:
name: Build on Ubuntu
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@v2
- name: Set up JDK 11
uses: actions/setup-java@v2
with:
distribution: 'temurin'
java-version: '11'
- name: Initialize sub-modules
run: git submodule update --init
- name: Cache Gradle packages
uses: actions/cache@v2
with:
path: ~/.gradle/caches
key: ${{ runner.os }}-gradle-${{ github.sha }}
restore-keys: ${{ runner.os }}-gradle
- name: Build with Gradle
run: |
export DISPLAY=':99.0'
/usr/bin/Xvfb :99 -screen 0 1024x768x24 > /dev/null 2>&1 &
./gradlew build -x check -x test --max-workers=2 --scan --no-daemon
find ~/.gradle/caches/ -name "*.lock" -type f -delete
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
scan-type: 'rootfs'
scan-ref: '/github/workspace/distribution/zip/jballerina-tools'
format: 'table'
timeout: '10m0s'
exit-code: '1'