-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
👷 [maykinmedia/objects-api#463] Add trivy image scan #194
Conversation
7b1c941
to
1ee864e
Compare
8bc6ab1
to
18b9fd7
Compare
@annashamray I can't run the cache update job yet because it's not on main yet |
18b9fd7
to
b362cfd
Compare
.github/workflows/trivy-db-cache.yml
Outdated
|
||
jobs: | ||
call-update-trivy-cache: | ||
uses: maykinmedia/open-api-workflows/.github/workflows/ci.yml@v3 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
uses: maykinmedia/open-api-workflows/.github/workflows/ci.yml@v3 | |
uses: maykinmedia/open-api-workflows/.github/workflows/trivy.yml@v3 |
Shouldn't it a specific workflow?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nvm I'm blind
d3cff47
to
4b1f99a
Compare
Turns out trivy has caching enabled by default now (aquasecurity/trivy-action#399), so I'll remove the unnecessary changes and just update the workflow versions |
4b1f99a
to
a7706d5
Compare
Fixes maykinmedia/objects-api#463 partially