@@ -16,34 +16,21 @@ jobs:
16
16
runs-on : ubuntu-latest
17
17
18
18
steps :
19
- - name : Checkout code
20
- uses : actions/checkout@v3
19
+ - name : Checkout code
20
+ uses : actions/checkout@v3
21
21
22
- - name : Set up Docker Buildx
23
- uses : docker/setup-buildx-action@v2
22
+ - name : Set up Docker Buildx
23
+ uses : docker/setup-buildx-action@v2
24
24
25
- - name : Build vote image
26
- run : |
27
- docker build -t vote-image ./vote
28
- docker save vote-image -o vote-image.tar
25
+ - name : Build vote image
26
+ run : |
27
+ docker build -t vote-image ./vote
28
+ docker save vote-image -o vote-image.tar
29
29
30
- - name : Scan Docker image from archive with Sysdig
31
- run : |
32
- docker run --rm \
33
- --platform linux/amd64 \
34
- -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} \
35
- -v ${{ github.workspace }}/vote-image.tar:/tmp/vote-image.tar \
36
- quay.io/sysdig/sysdig-cli-scanner:latest \
37
- --standalone \
38
- --input-file /tmp/vote-image.tar \
39
- vote-image:ci
30
+ - name : Scan Docker image with Sysdig (latest + amd64)
31
+ run : |
32
+ docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}/vote-image.tar:/tmp/vote-image.tar quay.io/sysdig/sysdig-cli-scanner:latest --standalone --input-file /tmp/vote-image.tar vote-image:ci
40
33
41
- - name : Scan IaC (k8s-specifications)
42
- run : |
43
- docker run --rm \
44
- --platform linux/amd64 \
45
- -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} \
46
- -v ${{ github.workspace }}:/iac \
47
- quay.io/sysdig/sysdig-cli-scanner:latest \
48
- --apiurl ${{ secrets.SYSDIG_API_URL }} \
49
- --iac scan /iac/k8s-specifications
34
+ - name : Scan IaC (k8s-specifications)
35
+ run : |
36
+ docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}:/iac quay.io/sysdig/sysdig-cli-scanner:latest --apiurl ${{ secrets.SYSDIG_API_URL }} --iac scan /iac/k8s-specifications
0 commit comments