Update .github/workflows/.github-ci.yaml

This commit is contained in:
richardrobertreitz 2024-12-16 09:03:08 +00:00
parent 1051bb1b56
commit 896bde316f

View file

@ -14,27 +14,10 @@ jobs:
uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/checkout@main
- name: Lint the Repository
run: |
which trivy
golangci-lint run ./... --out-format=json --timeout 5m --issues-exit-code 1
uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/lint/.github/workflows/golang-ci-lint.yml@main
with:
source: './...'
- name: Build Credentials File
run: |
mkdir -p /kaniko/.docker
AUTHSTRING=$(echo -n "${{ secrets.REGISTRY_USERNAME }}:${{ secrets.REGISTRY_PASSWORD }}" | base64 -w 0)
echo "{\"auths\":{\"https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live\":{\"auth\":\"${AUTHSTRING}\"}}}" > /kaniko/.docker/config.json
- name: Build Docker Container
run: |
/kaniko/executor --dockerfile=./Dockerfile --context=. --destination=forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
#- name: Build Docker Container
- name: Vulnerability Scanning
run: |
exit 0
pwd
whoami
which trivy || true
ls -la /usr/local/bin || true
ls -la /usr/bin || true
trivy image --scanners license,vuln,secret forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
trivy image --image-config-scanners secret,misconfig forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
#- name: Vulnerability Scanning