This commit is contained in:
parent
30312e19e9
commit
7725caf57d
1 changed files with 4 additions and 2 deletions
6
.github/workflows/.github-ci.yaml
vendored
6
.github/workflows/.github-ci.yaml
vendored
|
@ -20,7 +20,7 @@ jobs:
|
||||||
- name: Build Credentials File
|
- name: Build Credentials File
|
||||||
run: |
|
run: |
|
||||||
mkdir -p /kaniko/.docker
|
mkdir -p /kaniko/.docker
|
||||||
AUTHSTRING=$(echo -n "${{ secrets.REGISTRY_USERNAME }}:${{ secrets.REGISTRY_PASSWORD }}" | base64)
|
AUTHSTRING=$(echo -n "${{ secrets.REGISTRY_USERNAME }}:${{ secrets.REGISTRY_PASSWORD }}" | base64 -w 0)
|
||||||
echo "{\"auths\":{\"https://gitea.cnoe.localtest.me\":{\"auth\":\"${AUTHSTRING}\"}}}" > /kaniko/.docker/config.json
|
echo "{\"auths\":{\"https://gitea.cnoe.localtest.me\":{\"auth\":\"${AUTHSTRING}\"}}}" > /kaniko/.docker/config.json
|
||||||
|
|
||||||
- name: Build Docker Container
|
- name: Build Docker Container
|
||||||
|
@ -29,4 +29,6 @@ jobs:
|
||||||
|
|
||||||
- name: trivy
|
- name: trivy
|
||||||
run: |
|
run: |
|
||||||
trivy ...
|
set -e
|
||||||
|
TRIVY_INSECURE=true trivy image --scanners license,vuln,secret gitea.cnoe.localtest.me/giteaadmin/fib:v0.0.1
|
||||||
|
TRIVY_INSECURE=true trivy image --image-config-scanners secret,misconfig gitea.cnoe.localtest.me/giteaadmin/fib:v0.0.1
|
||||||
|
|
Loading…
Reference in a new issue