Skip to content

Commit 8d76915

Browse files
committed
Fix: use --standalone --input-file with CLI latest
1 parent 09c311c commit 8d76915

File tree

1 file changed

+14
-27
lines changed

1 file changed

+14
-27
lines changed

.github/workflows/sysdig-scan.yml

Lines changed: 14 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -16,34 +16,21 @@ jobs:
1616
runs-on: ubuntu-latest
1717

1818
steps:
19-
- name: Checkout code
20-
uses: actions/checkout@v3
19+
- name: Checkout code
20+
uses: actions/checkout@v3
2121

22-
- name: Set up Docker Buildx
23-
uses: docker/setup-buildx-action@v2
22+
- name: Set up Docker Buildx
23+
uses: docker/setup-buildx-action@v2
2424

25-
- name: Build vote image
26-
run: |
27-
docker build -t vote-image ./vote
28-
docker save vote-image -o vote-image.tar
25+
- name: Build vote image
26+
run: |
27+
docker build -t vote-image ./vote
28+
docker save vote-image -o vote-image.tar
2929
30-
- name: Scan Docker image from archive with Sysdig
31-
run: |
32-
docker run --rm \
33-
     --platform linux/amd64 \
34-
-e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} \
35-
-v ${{ github.workspace }}/vote-image.tar:/tmp/vote-image.tar \
36-
quay.io/sysdig/sysdig-cli-scanner:latest \
37-
--standalone \
38-
--input-file /tmp/vote-image.tar \
39-
vote-image:ci
30+
- name: Scan Docker image with Sysdig (latest + amd64)
31+
run: |
32+
docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}/vote-image.tar:/tmp/vote-image.tar quay.io/sysdig/sysdig-cli-scanner:latest --standalone --input-file /tmp/vote-image.tar vote-image:ci
4033
41-
- name: Scan IaC (k8s-specifications)
42-
run: |
43-
docker run --rm \
44-
--platform linux/amd64 \
45-
-e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} \
46-
-v ${{ github.workspace }}:/iac \
47-
quay.io/sysdig/sysdig-cli-scanner:latest \
48-
--apiurl ${{ secrets.SYSDIG_API_URL }} \
49-
--iac scan /iac/k8s-specifications
34+
- name: Scan IaC (k8s-specifications)
35+
run: |
36+
docker run --rm --platform linux/amd64 -e SECURE_API_TOKEN=${{ secrets.SYSDIG_SECURE_TOKEN }} -v ${{ github.workspace }}:/iac quay.io/sysdig/sysdig-cli-scanner:latest --apiurl ${{ secrets.SYSDIG_API_URL }} --iac scan /iac/k8s-specifications

0 commit comments

Comments
 (0)