blockworks-foundation
/
mango-web
mirror of https://github.com/blockworks-foundation/mango-web.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update trivy-scan.yml

This commit is contained in:
silas 2022-01-08 10:33:38 +00:00 committed by GitHub
parent 5fd32ba54b
commit 05b3f7e080
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/trivy-scan.yml vendored
View File

@ -21,7 +21,7 @@ jobs:
uses: actions/checkout@v2 uses: actions/checkout@v2
# Run Trivy to fail the job on critical vulnerabiliies with fix available # Run Trivy to fail the job on critical vulnerabiliies with fix available
- name: Run Trivy - name: Run Trivy for critical vulnerabilities
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:
scan-type: 'fs' # Filesystem mode scan-type: 'fs' # Filesystem mode
@ -29,13 +29,9 @@ jobs:
format: 'table' # Table output mode as next step will report in security tab format: 'table' # Table output mode as next step will report in security tab
severity: 'CRITICAL' # Error only on critical vulnerabilities severity: 'CRITICAL' # Error only on critical vulnerabilities
exit-code: '1' # Fail the job if a critical vulnerability with fix available is found exit-code: '1' # Fail the job if a critical vulnerability with fix available is found
- name: Failure feedback
run: |
echo "This table contains the vulnerabilities that failed the job."
echo "Vulnerabilities lower than critical are reported in the security tab."
# Run Trivy reporting all vulnerabilities to the security tab # Run Trivy reporting all vulnerabilities to the security tab
- name: Run Trivy - name: Run Trivy for reporting all vulnerabilities
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
if: always() # Run this step even if job fails due to critical vuln if: always() # Run this step even if job fails due to critical vuln
with: with: