cubetiq/code-server
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix: re-enable trivy-scan-repo

Browse Source
This commit is contained in:
Joe Previte 2021-05-12 10:25:07 -07:00
parent f5b792706a
commit 604194d1b8
No known key found for this signature in database
GPG Key ID: 2C91590C6B742C24
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/ci.yaml vendored
View File

@ -466,16 +466,12 @@ jobs:
# codeql/upload-sarif action per job
trivy-scan-repo:
runs-on: ubuntu-20.04
# NOTE@jsjoeio 5/10/2021
# Disabling until fixed upstream
# See: https://github.com/aquasecurity/trivy-action/issues/22#issuecomment-833768084
if: "1 == 2"
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Run Trivy vulnerability scanner in repo mode
#Commit SHA for v0.0.14
uses: aquasecurity/trivy-action@341f810bd602419f966a081da3f4debedc3e5c8e
#Commit SHA for v0.0.15
uses: aquasecurity/trivy-action@9789b6ae3b29487541292242e416cd89e4e54874
with:
scan-type: "fs"
scan-ref: "."