Skip to content
This repository was archived by the owner on Jan 22, 2024. It is now read-only.

Author CircleCI Orb to Simplify clair-cicd Usage #12

@simonsdave

Description

@simonsdave

To use clair-cicd in a CircleCI pipeline the following step is typically authored

- run:
    name: Run docker image vulnerability risk assessment
    command: |
      curl \
        -s \
        -L \
        https://raw.githubusercontent.com/simonsdave/clair-cicd/master/bin/assess-image-risk.sh | \
        bash -s -- --verbose --whitelist 'file://clair-cicd-whitelist-dev-env.json' "${DOCKER_TEMP_IMAGE}"

That's not too bad but an Orb would simplify the above and provide a layer of abstraction so the invocation could be changed and consumers of clair-cicd would not be affected.

See this for how to author an Orb.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions