|
8 | 8 | name: Daily scan |
9 | 9 |
|
10 | 10 | on: |
11 | | - schedule: |
12 | | - - cron: '0 18 * * *' # scheduled to run at 18:00 UTC every day |
| 11 | + schedule: # scheduled to run at 14:00, 20:00, 02:00 UTC every day |
| 12 | + - cron: '0 14 * * *' # 6:00/7:00 PST/PDT (14:00 UTC) |
| 13 | + - cron: '0 20 * * *' # 12:00/13:00 PST/PDT (20:00 UTC) |
| 14 | + - cron: '0 02 * * *' # 18:00/19:00 PST/PDT (02:00 UTC) |
13 | 15 | workflow_dispatch: # be able to run the workflow on demand |
14 | 16 |
|
15 | 17 | env: |
|
24 | 26 | runs-on: ubuntu-latest |
25 | 27 | steps: |
26 | 28 | - name: Checkout repo for dependency scan |
27 | | - uses: actions/checkout@v4 |
| 29 | + uses: actions/checkout@v5 |
28 | 30 | with: |
29 | 31 | fetch-depth: 0 |
30 | 32 |
|
|
41 | 43 | aws-region: ${{ env.AWS_DEFAULT_REGION }} |
42 | 44 |
|
43 | 45 | - name: Get NVD API key for dependency scan |
44 | | - uses: aws-actions/aws-secretsmanager-get-secrets@v1 |
| 46 | + uses: aws-actions/aws-secretsmanager-get-secrets@v2 |
45 | 47 | id: nvd_api_key |
46 | 48 | with: |
47 | 49 | secret-ids: ${{ secrets.NVD_API_KEY_SECRET_ARN }} |
@@ -97,15 +99,15 @@ jobs: |
97 | 99 | id: high_scan_v2 |
98 | 100 | uses: ./.github/actions/image_scan |
99 | 101 | with: |
100 | | - image-ref: "public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v2.11.1" |
| 102 | + image-ref: "public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v2.11.2" |
101 | 103 | severity: 'CRITICAL,HIGH' |
102 | 104 |
|
103 | 105 | - name: Perform low image scan on v2 |
104 | 106 | if: always() |
105 | 107 | id: low_scan_v2 |
106 | 108 | uses: ./.github/actions/image_scan |
107 | 109 | with: |
108 | | - image-ref: "public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v2.11.1" |
| 110 | + image-ref: "public.ecr.aws/aws-observability/adot-autoinstrumentation-java:v2.11.2" |
109 | 111 | severity: 'MEDIUM,LOW,UNKNOWN' |
110 | 112 |
|
111 | 113 | - name: Configure AWS Credentials for emitting metrics |
|
0 commit comments