Update .github/workflows/.github-ci.yaml
This commit is contained in:
parent
1051bb1b56
commit
896bde316f
1 changed files with 5 additions and 22 deletions
27
.github/workflows/.github-ci.yaml
vendored
27
.github/workflows/.github-ci.yaml
vendored
|
@ -14,27 +14,10 @@ jobs:
|
|||
uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/checkout@main
|
||||
|
||||
- name: Lint the Repository
|
||||
run: |
|
||||
which trivy
|
||||
golangci-lint run ./... --out-format=json --timeout 5m --issues-exit-code 1
|
||||
uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/lint/.github/workflows/golang-ci-lint.yml@main
|
||||
with:
|
||||
source: './...'
|
||||
|
||||
- name: Build Credentials File
|
||||
run: |
|
||||
mkdir -p /kaniko/.docker
|
||||
AUTHSTRING=$(echo -n "${{ secrets.REGISTRY_USERNAME }}:${{ secrets.REGISTRY_PASSWORD }}" | base64 -w 0)
|
||||
echo "{\"auths\":{\"https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live\":{\"auth\":\"${AUTHSTRING}\"}}}" > /kaniko/.docker/config.json
|
||||
|
||||
- name: Build Docker Container
|
||||
run: |
|
||||
/kaniko/executor --dockerfile=./Dockerfile --context=. --destination=forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
|
||||
#- name: Build Docker Container
|
||||
|
||||
- name: Vulnerability Scanning
|
||||
run: |
|
||||
exit 0
|
||||
pwd
|
||||
whoami
|
||||
which trivy || true
|
||||
ls -la /usr/local/bin || true
|
||||
ls -la /usr/bin || true
|
||||
trivy image --scanners license,vuln,secret forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
|
||||
trivy image --image-config-scanners secret,misconfig forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go/fibonacci_go:latest
|
||||
#- name: Vulnerability Scanning
|
||||
|
|
Loading…
Reference in a new issue