Skip to content

Commit bb989ce

Browse files
committed
Adding scanning of built container
1 parent 558861b commit bb989ce

File tree

2 files changed

+18
-18
lines changed

2 files changed

+18
-18
lines changed

.github/workflows/docker-release-3.0.yml

Lines changed: 1 addition & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -72,21 +72,4 @@ jobs:
7272
docker tag $DOCKER_GENERATOR_ROOT_FULL_IMAGE_NAME:${{ env.TAG }} $DOCKER_GENERATOR_FULL_IMAGE_NAME:${{ env.TAG }}-root
7373
docker push $DOCKER_GENERATOR_FULL_IMAGE_NAME:$${{ env.TAG }}-root
7474
env:
75-
TAG: ${{ github.event.inputs.tag }}
76-
77-
scan-with-lacework:
78-
name: Trigger LaceWork Scanning
79-
runs-on: ubuntu-latest
80-
81-
needs: [ build_push_docker_release_30 ]
82-
if: success()
83-
84-
steps:
85-
- name: Trigger LaceWork Scanning using a different method
86-
run: |
87-
docker run -e LW_ACCOUNT_NAME=$LW_ACCOUNT_NAME -e LW_ACCESS_TOKEN=$LW_ACCESS_TOKEN -e LW_SCANNER_DISABLE_UPDATES=false -v /var/run/docker.sock:/var/run/docker.sock lacework/lacework-inline-scanner:latest image evaluate swaggerapi/swagger-codegen-cli latest --docker-server index.docker.io --docker-username $docker_user --docker-password $docker_password > /dev/null 2>&1
88-
env:
89-
LW_ACCOUNT_NAME: ${{ secrets.LW_ACCOUNT_NAME }}
90-
LW_ACCESS_TOKEN: ${{ secrets.LW_ACCESS_TOKEN }}
91-
docker_user: ${{ secrets.DOCKERHUB_SB_USERNAME}}
92-
docker_password: ${{ secrets.DOCKERHUB_SB_PASSWORD}}
75+
TAG: ${{ github.event.inputs.tag }}

.github/workflows/maven-master.yml

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,3 +57,20 @@ jobs:
5757
else
5858
echo "not deploying release nor building and pushing release docker image: " ${MY_POM_VERSION}
5959
fi
60+
61+
scan-with-lacework:
62+
name: Trigger LaceWork Scanning
63+
runs-on: ubuntu-latest
64+
65+
needs: [ build ]
66+
if: success()
67+
68+
steps:
69+
- name: Trigger LaceWork Scanning using a different method
70+
run: |
71+
docker run -e LW_ACCOUNT_NAME=$LW_ACCOUNT_NAME -e LW_ACCESS_TOKEN=$LW_ACCESS_TOKEN -e LW_SCANNER_DISABLE_UPDATES=false -v /var/run/docker.sock:/var/run/docker.sock lacework/lacework-inline-scanner:latest image evaluate swaggerapi/swagger-codegen-cli latest --docker-server index.docker.io --docker-username $docker_user --docker-password $docker_password > /dev/null 2>&1
72+
env:
73+
LW_ACCOUNT_NAME: ${{ secrets.LW_ACCOUNT_NAME }}
74+
LW_ACCESS_TOKEN: ${{ secrets.LW_ACCESS_TOKEN }}
75+
docker_user: ${{ secrets.DOCKERHUB_SB_USERNAME}}
76+
docker_password: ${{ secrets.DOCKERHUB_SB_PASSWORD}}

0 commit comments

Comments
 (0)