diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml deleted file mode 100644 index e6c18e5..0000000 --- a/.github/workflows/scan.yml +++ /dev/null @@ -1,39 +0,0 @@ -# NOTE refs -# - https://github.com/aquasecurity/trivy-action#using-trivy-to-scan-your-private-registry - -name: scan -on: - push: - branches: - - main - schedule: - - cron: "0 0 * * MON" - workflow_dispatch: {} -permissions: - contents: read - security-events: write -concurrency: - group: ${{ github.run_id }} - cancel-in-progress: false -jobs: - prepare: - runs-on: ubuntu-latest - outputs: - matrix: ${{ steps.set.outputs.matrix }} - steps: - - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 - - id: set - run: | - echo "matrix=$(jq -r -c '.sync as $sync | .build as $build | {"include":[{"destination": $sync[].destination}, {"destination": $build[].destination}]}' <<< "$(yq e . -o json config.yaml)")" >> $GITHUB_OUTPUT - - name: check output - run: | - jq . <<< '${{ steps.set.outputs.matrix }}' - scan: - if: ${{ fromJSON(needs.prepare.outputs.matrix) != null }} - needs: prepare - strategy: - fail-fast: false - matrix: ${{ fromJSON(needs.prepare.outputs.matrix) }} - uses: GeoNet/Actions/.github/workflows/reusable-container-image-scan.yml@main - with: - imageRefs: ${{ fromJSON(toJSON(matrix)).destination }}