Skip to content

added trivy-scanner #151

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Mahesh-Binayak wants to merge 10 commits into
base: develop
Choose a base branch
from
Open

added trivy-scanner #151

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
d5ef41e
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
ae12259
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
1805f36
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
e3168df
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
8260296
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
1ac90af
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
13b85cb
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
04b8fa6
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
210f3ce
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
e4c8c73
Update push-trigger.yml
Mahesh-Binayak Oct 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions .github/workflows/push-trigger.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,3 +83,32 @@ jobs:
ACTOR_DOCKER_HUB: ${{ secrets.ACTOR_DOCKER_HUB }}
RELEASE_DOCKER_HUB: ${{ secrets.RELEASE_DOCKER_HUB }}
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}

trivy-scan:
needs: build-dockers
runs-on: ubuntu-latest
env:
NAMESPACE: ${{ secrets.dev_namespace_docker_hub }}
SERVICE_NAME: biosdk-server
VERSION: latest # Modify this as needed or set dynamically based on your versioning scheme

steps:
- name: Checkout code
uses: actions/checkout@v2

- name: Run Trivy vulnerability scanner
uses: aquasecurity/[email protected]
with:
image-ref: 'docker.io/${{ env.SERVICE_NAME }}:${{ env.VERSION }}'
format: 'sarif'
output: 'trivy-results.sarif'


- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'trivy-results.sarif'
- name: Upload Trivy scan results to GitHub security tab
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: 'trivy-results.sarif'