Skip to content

Commit 0f65abe

Browse files
committed
Fix: use --standalone --input-file with CLI latest
1 parent 8d76915 commit 0f65abe

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

.github/workflows/sysdig-scan.yml

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,10 +27,15 @@ jobs:
2727
docker build -t vote-image ./vote
2828
docker save vote-image -o vote-image.tar
2929
30-
- name: Scan Docker image with Sysdig (latest + amd64)
30+
- name: Download Sysdig CLI Scanner
3131
run: |
32-
docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}/vote-image.tar:/tmp/vote-image.tar quay.io/sysdig/sysdig-cli-scanner:latest --standalone --input-file /tmp/vote-image.tar vote-image:ci
32+
curl -LO https://download.sysdig.com/scanning/sysdig-cli-scanner/latest/linux/sysdig-cli-scanner
33+
chmod +x sysdig-cli-scanner
34+
35+
- name: Scan Docker image from archive with Sysdig (binary)
36+
run: |
37+
./sysdig-cli-scanner --standalone --input-file vote-image.tar vote-image:ci --console-log --detailed-policies-eval --full-vulns-table -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }}
3338
3439
- name: Scan IaC (k8s-specifications)
3540
run: |
36-
docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}:/iac quay.io/sysdig/sysdig-cli-scanner:latest --apiurl ${{ secrets.SYSDIG_API_URL }} --iac scan /iac/k8s-specifications
41+
./sysdig-cli-scanner --apiurl ${{ secrets.SYSDIG_API_URL }} --iac scan ./k8s-specifications -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }}

0 commit comments

Comments
 (0)