Merge pull request #31 from WyriHaximus/revert-30-temporary-disable-cve-scanning

Revert "Temporary disable CVE scanning"

Author: WyriHaximus

.github/workflows/ci.yml

@@ -74,25 +74,25 @@ jobs:
       - uses: actions/checkout@v1
       - run: docker version
       - run: docker images
-#      - name: Install clair-scanner
-#        run: |
-#          sudo curl -L https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64 -o /usr/local/bin/clair-scanner
-#          sudo chmod +x /usr/local/bin/clair-scanner
-#      - run: docker images
-#      - run: mkdir -p $(echo "./clair/${DOCKER_IMAGE}:${REF}" | tr '[:upper:]' '[:lower:]')
-#        env:
-#          REF: ${{ needs.generate-ref.outputs.ref }}
-#      - run: docker-compose -f .docker/security/docker-compose.yml -p clair-ci up -d
+      - name: Install clair-scanner
+        run: |
+          sudo curl -L https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64 -o /usr/local/bin/clair-scanner
+          sudo chmod +x /usr/local/bin/clair-scanner
+      - run: docker images
+      - run: mkdir -p $(echo "./clair/${DOCKER_IMAGE}:${REF}" | tr '[:upper:]' '[:lower:]')
+        env:
+          REF: ${{ needs.generate-ref.outputs.ref }}
+      - run: docker-compose -f .docker/security/docker-compose.yml -p clair-ci up -d
       - run: docker build --no-cache -t "${DOCKER_IMAGE}:${REF}" . -f Dockerfile-build
         env:
           REF: ${{ needs.generate-ref.outputs.ref }}
       - run: docker tag "${DOCKER_IMAGE}:${REF}" "${DOCKER_IMAGE}:sha-${GITHUB_SHA}"
         env:
           REF: ${{ needs.generate-ref.outputs.ref }}
-#      - run: echo -e "${DOCKER_IMAGE}:${REF}" | xargs -I % sh -c 'clair-scanner --ip 172.17.0.1 -r "./clair/%.json" -l ./clair/clair.log % || (echo "% is vulnerable" && exit 1)'
-#        env:
-#          REF: ${{ needs.generate-ref.outputs.ref }}
-#      - run: docker-compose -f .docker/security/docker-compose.yml -p clair-ci down
+      - run: echo -e "${DOCKER_IMAGE}:${REF}" | xargs -I % sh -c 'clair-scanner --ip 172.17.0.1 -r "./clair/%.json" -l ./clair/clair.log % || (echo "% is vulnerable" && exit 1)'
+        env:
+          REF: ${{ needs.generate-ref.outputs.ref }}
+      - run: docker-compose -f .docker/security/docker-compose.yml -p clair-ci down
       - run: docker images
       - name: Login to Docker Hub
         if: contains(github.ref, 'dependabot') == false