Skip to content

Commit 5faa9f8

Browse files
adjust analysis
1 parent f346e9a commit 5faa9f8

File tree

1 file changed

+7
-26
lines changed

1 file changed

+7
-26
lines changed

.github/workflows/deploy.yml renamed to .github/workflows/security_analysis.yml

Lines changed: 7 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,8 @@ on:
99
- main
1010

1111
jobs:
12-
Grype:
12+
grype:
13+
name: Grype
1314
runs-on: ubuntu-latest
1415
steps:
1516
- name: Checkout source code
@@ -26,42 +27,22 @@ jobs:
2627
# with:
2728
# sarif_file: ${{ steps.scan.outputs.sarif }}
2829

29-
Grype-Image:
30+
grype-image:
31+
name: Grype
3032
runs-on: ubuntu-latest
3133
steps:
3234
- name: Checkout source code
3335
uses: actions/checkout@v4
3436
- name: Build the Container image
35-
run: |
36-
pwd
37-
ls -la
38-
docker build . --file Dockerfile --tag localbuild/todo-app:v1
37+
run: docker build . --file Dockerfile --tag localbuild/todo-app:v1
3938
- uses: anchore/scan-action@v3
4039
id: scan
4140
with:
4241
image: "localbuild/todo-app:v1"
4342
output-format: table
44-
# - name: upload Anchore scan SARIF report
45-
# uses: github/codeql-action/upload-sarif@v3
46-
# with:
47-
# sarif_file: ${{ steps.scan.outputs.sarif }}
48-
49-
Clair:
50-
name: Clair
51-
runs-on: ubuntu-latest
52-
steps:
53-
- name: Checkout source code
54-
uses: actions/checkout@v4
55-
- name: Build an image from Dockerfile
56-
run: docker build -t localbuild/mytodo-app:${{ github.sha }} .
57-
- name: Save Docker image
58-
run: docker save -o ${{ github.sha }} localbuild/mytodo-app:${{ github.sha }}
59-
- name: Run Clair V4
60-
uses: quay/clair-action@main
61-
with:
62-
image-path: ${{ github.sha }}
6343

64-
Bearer:
44+
bearer:
45+
name: Bearer
6546
runs-on: ubuntu-latest
6647
steps:
6748
- name: Checkout source code

0 commit comments

Comments
 (0)