Skip to content

Commit

Permalink
Update push.yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
tzurielweisberg authored May 9, 2023
1 parent 9874fe9 commit c35b8b7
Showing 1 changed file with 31 additions and 31 deletions.
62 changes: 31 additions & 31 deletions .github/workflows/push.yaml
Original file line number Diff line number Diff line change
@@ -1,32 +1,32 @@
name: build
on:
push:
branches:
- master
jobs:
aqua:
name: Trivy
runs-on: ubuntu-latest
# runs-on: windows-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Run Trivy scanner
run: |
printenv
echo here
trivyVersion=0.39.1
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b . v${trivyVersion}
#./trivy plugin install github.com/tzurielweisberg/plugin-version
./trivy fs --skip-policy-exit-code --debug .
echo $?
echo hello
env:
AQUA_KEY: ${{secrets.AQUA_KEY}}
AQUA_SECRET: ${{secrets.AQUA_SECRET}}
AQUA_URL: https://api.dev.supply-chain.cloud.aquasec.com
CSPM_URL: https://stage.api.cloudsploit.com
TRIVY_RUN_AS_PLUGIN: 'aqua'
GITHUB_TOKEN: ${{ github.token }}
TRIVY_SECURITY_CHECKS: config,secret
# name: build
# on:
# push:
# branches:
# - master
# jobs:
# aqua:
# name: Trivy
# runs-on: ubuntu-latest
# # runs-on: windows-latest
# steps:
# - name: Checkout code
# uses: actions/checkout@v2
# - name: Run Trivy scanner
# run: |
# printenv
# echo here
# trivyVersion=0.39.1
# curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b . v${trivyVersion}
# #./trivy plugin install github.com/tzurielweisberg/plugin-version
# ./trivy fs --skip-policy-exit-code --debug .
# echo $?
# echo hello
# env:
# AQUA_KEY: ${{secrets.AQUA_KEY}}
# AQUA_SECRET: ${{secrets.AQUA_SECRET}}
# AQUA_URL: https://api.dev.supply-chain.cloud.aquasec.com
# CSPM_URL: https://stage.api.cloudsploit.com
# TRIVY_RUN_AS_PLUGIN: 'aqua'
# GITHUB_TOKEN: ${{ github.token }}
# TRIVY_SECURITY_CHECKS: config,secret

0 comments on commit c35b8b7

Please sign in to comment.