@@ -17,48 +17,74 @@ jobs:
1717 generate-and-load-sbom :
1818 runs-on : ubuntu-24.04
1919 steps :
20- - name : Prepare Vuls config.toml
20+ - name : Install Vuls
2121 run : |
22- mkdir -p vuls/
23- cat > vuls/config.toml <<'EOF'
22+ curl -sL https://github.com/future-architect/vuls/releases/download/v0.27.0/vuls_0.27.0_linux_amd64.tar.gz \
23+ | tar -xz
24+ sudo mv vuls /usr/local/bin/vuls
25+
26+ - name : Create config.toml
27+ run : |
28+ mkdir -p vuls
29+ cat > vuls/config.toml <<EOF
2430 [servers]
25-
2631 [servers.localhost]
2732 host = "localhost"
28- port = "local"
33+ user = "runner"
34+ sudo = true
2935 EOF
3036
31- - name : Run Vuls configtest
32- run : |
33- docker run --rm \
34- -v $PWD/vuls:/vuls \
35- vuls/vuls configtest -config=/vuls/config.toml
37+ - name : Run configtest
38+ run : vuls configtest -c ./vuls/config.toml
3639
37- - name : Run Vuls scan
38- run : |
39- mkdir -p $PWD/vuls/result
40- docker run --rm \
41- -v $PWD/vuls:/vuls \
42- -e VULS_RESULT_DIR=/vuls/result \
43- -e HOME=/vuls \
44- --user $(id -u):$(id -g) \
45- vuls/vuls scan -config=/vuls/config.toml
40+ - name : Run scan
41+ run : vuls scan -c ./vuls/config.toml
4642
47- - name : Run Vuls report
48- run : |
49- docker run --rm \
50- -v $PWD/vuls:/vuls \
51- -e VULS_RESULT_DIR=/vuls/result \
52- vuls/vuls report -config=/vuls/config.toml -format-cyclonedx-json
53-
54- - name : DEBUG
55- run : |
56- ls -la vuls/
57- ls -la vuls/result
58- # ls -la vuls/results
43+ - name : Run report
44+ run : vuls report -c ./vuls/config.toml -format-cyclonedx-json
5945
60- - name : Upload SBOM artifact
61- uses : actions/upload-artifact@v4
62- with :
63- name : vuls
64- path : vuls
46+ # - name: Prepare Vuls config.toml
47+ # run: |
48+ # mkdir -p vuls/
49+ # cat > vuls/config.toml <<'EOF'
50+ # [servers]
51+ #
52+ # [servers.localhost]
53+ # host = "localhost"
54+ # port = "local"
55+ # EOF
56+ #
57+ # - name: Run Vuls configtest
58+ # run: |
59+ # docker run --rm \
60+ # -v $PWD/vuls:/vuls \
61+ # vuls/vuls configtest -config=/vuls/config.toml
62+ #
63+ # - name: Run Vuls scan
64+ # run: |
65+ # mkdir -p $PWD/vuls/result
66+ # docker run --rm \
67+ # -v $PWD/vuls:/vuls \
68+ # -e VULS_RESULT_DIR=/vuls/result \
69+ # -e HOME=/vuls \
70+ # --user $(id -u):$(id -g) \
71+ # vuls/vuls scan -config=/vuls/config.toml
72+ #
73+ # - name: Run Vuls report
74+ # run: |
75+ # docker run --rm \
76+ # -v $PWD/vuls:/vuls \
77+ # -e VULS_RESULT_DIR=/vuls/result \
78+ # vuls/vuls report -config=/vuls/config.toml -format-cyclonedx-json
79+ #
80+ # - name: DEBUG
81+ # run: |
82+ # ls -la vuls/
83+ # ls -la vuls/result
84+ # # ls -la vuls/results
85+ #
86+ # - name: Upload SBOM artifact
87+ # uses: actions/upload-artifact@v4
88+ # with:
89+ # name: vuls
90+ # path: vuls
0 commit comments