Skip to content

Commit 6612d2c

Browse files
committed
Fix: Ensure SECURE_API_TOKEN is injected properly
1 parent 8d4fd5a commit 6612d2c

File tree

1 file changed

+12
-4
lines changed

1 file changed

+12
-4
lines changed

.github/workflows/scan.yml

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,7 @@ jobs:
2323
docker build -t worker ./worker
2424
docker build -t result ./result
2525
26-
-
27-
name: Debug: Check if SECURE_API_TOKEN is available
26+
- name: Debug
2827
env:
2928
SECURE_API_TOKEN: "${{ secrets.SECURE_API_TOKEN }}"
3029
run: |
@@ -35,9 +34,18 @@ jobs:
3534
exit 1
3635
else
3736
echo "✅ SECURE_API_TOKEN is available."
38-
fi
3937
4038
- name: Run Sysdig Scan (voting-app)
4139
run: |
42-
docker run --rm --platform linux/amd64 --user 0 -v "$(pwd)/scan-logs:/home/nonroot/scan-logs" -v /var/run/docker.sock:/var/run/docker.sock -e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" quay.io/sysdig/sysdig-cli-scanner:1.22.4 --apiurl "$SYS_DIG_SECURE_URL" --loglevel debug --skiptlsverify docker://voting-app
40+
docker run --rm \
41+
--platform linux/amd64 \
42+
--user 0 \
43+
-v "$(pwd)/scan-logs:/home/nonroot/scan-logs" \
44+
-v /var/run/docker.sock:/var/run/docker.sock \
45+
-e SECURE_API_TOKEN="${{ secrets.SECURE_API_TOKEN }}" \
46+
quay.io/sysdig/sysdig-cli-scanner:1.22.4 \
47+
--apiurl "$SYS_DIG_SECURE_URL" \
48+
--loglevel debug \
49+
--skiptlsverify \
50+
docker://voting-app
4351

0 commit comments

Comments
 (0)