File tree Expand file tree Collapse file tree 1 file changed +8
-3
lines changed Expand file tree Collapse file tree 1 file changed +8
-3
lines changed Original file line number Diff line number Diff line change @@ -27,10 +27,15 @@ jobs:
27
27
docker build -t vote-image ./vote
28
28
docker save vote-image -o vote-image.tar
29
29
30
- - name : Scan Docker image with Sysdig (latest + amd64)
30
+ - name : Download Sysdig CLI Scanner
31
31
run : |
32
- docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}/vote-image.tar:/tmp/vote-image.tar quay.io/sysdig/sysdig-cli-scanner:latest --standalone --input-file /tmp/vote-image.tar vote-image:ci
32
+ curl -LO https://download.sysdig.com/scanning/sysdig-cli-scanner/latest/linux/sysdig-cli-scanner
33
+ chmod +x sysdig-cli-scanner
34
+
35
+ - name : Scan Docker image from archive with Sysdig (binary)
36
+ run : |
37
+ ./sysdig-cli-scanner --standalone --input-file vote-image.tar vote-image:ci --console-log --detailed-policies-eval --full-vulns-table -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }}
33
38
34
39
- name : Scan IaC (k8s-specifications)
35
40
run : |
36
- docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN= ${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}:/ iac quay.io/sysdig/sysdig-cli-scanner:latest --apiurl ${{ secrets.SYSDIG_API_URL }} --iac scan /iac/k8s-specifications
41
+ ./sysdig-cli-scanner --apiurl ${{ secrets.SYSDIG_API_URL }} -- iac scan ./k8s-specifications -e SECURE_API_TOKEN= ${{ secrets.SYSDIG_SECURE_TOKEN }}
You can’t perform that action at this time.
0 commit comments