From ca13320e80a11102f72e9ae04671c92cebe0c277 Mon Sep 17 00:00:00 2001 From: Dagan McGregor Date: Thu, 5 Dec 2024 00:13:22 +1300 Subject: [PATCH] fix: remove trivy scanner job from github actions We need to look at using a different method for running scans which could be using Tenable scanner --- .github/workflows/scan.yml | 39 -------------------------------------- 1 file changed, 39 deletions(-) delete mode 100644 .github/workflows/scan.yml diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml deleted file mode 100644 index e6c18e5..0000000 --- a/.github/workflows/scan.yml +++ /dev/null @@ -1,39 +0,0 @@ -# NOTE refs -# - https://github.com/aquasecurity/trivy-action#using-trivy-to-scan-your-private-registry - -name: scan -on: - push: - branches: - - main - schedule: - - cron: "0 0 * * MON" - workflow_dispatch: {} -permissions: - contents: read - security-events: write -concurrency: - group: ${{ github.run_id }} - cancel-in-progress: false -jobs: - prepare: - runs-on: ubuntu-latest - outputs: - matrix: ${{ steps.set.outputs.matrix }} - steps: - - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 - - id: set - run: | - echo "matrix=$(jq -r -c '.sync as $sync | .build as $build | {"include":[{"destination": $sync[].destination}, {"destination": $build[].destination}]}' <<< "$(yq e . -o json config.yaml)")" >> $GITHUB_OUTPUT - - name: check output - run: | - jq . <<< '${{ steps.set.outputs.matrix }}' - scan: - if: ${{ fromJSON(needs.prepare.outputs.matrix) != null }} - needs: prepare - strategy: - fail-fast: false - matrix: ${{ fromJSON(needs.prepare.outputs.matrix) }} - uses: GeoNet/Actions/.github/workflows/reusable-container-image-scan.yml@main - with: - imageRefs: ${{ fromJSON(toJSON(matrix)).destination }}