Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

👷 [maykinmedia/objects-api#463] Add trivy image scan #194

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

stevenbal
Copy link
Contributor

@stevenbal stevenbal commented Oct 18, 2024

Fixes maykinmedia/objects-api#463 partially

@stevenbal stevenbal force-pushed the feature/re-enable-trivy-image-scan branch 3 times, most recently from 7b1c941 to 1ee864e Compare October 18, 2024 14:41
@stevenbal stevenbal force-pushed the feature/re-enable-trivy-image-scan branch 3 times, most recently from 8bc6ab1 to 18b9fd7 Compare November 1, 2024 08:33
@stevenbal
Copy link
Contributor Author

@annashamray I can't run the cache update job yet because it's not on main yet

@@ -0,0 +1,10 @@
name: Call Update Trivy Cache
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry a little nitpicking. Correct me if I'm wrong but this workflow doesn't trigger trivy scan, it just cached the DB, right?
So maybe let's rename it to trivy-db-cache of something like this?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

changed it

.github/workflows/trivy.yml Outdated Show resolved Hide resolved
@stevenbal stevenbal force-pushed the feature/re-enable-trivy-image-scan branch from 18b9fd7 to b362cfd Compare November 8, 2024 14:11

jobs:
call-update-trivy-cache:
uses: maykinmedia/open-api-workflows/.github/workflows/ci.yml@v3
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
uses: maykinmedia/open-api-workflows/.github/workflows/ci.yml@v3
uses: maykinmedia/open-api-workflows/.github/workflows/trivy.yml@v3

Shouldn't it a specific workflow?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Re-enable trivy image scan across projects
2 participants