IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

ci: Update trivy action to run on action updates (#95096)

Browse Source 
Signed-off-by: Dave Henderson <dave.henderson@grafana.com>
This commit is contained in:
Dave Henderson 2024-10-22 10:00:47 -04:00 committed by GitHub
parent 112763594a
commit 25e85f8947
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.github/workflows/trivy-scan.yml vendored
View File

@ -4,11 +4,13 @@ on:
# only run on PRs where go.mod/go.sum/etc have been updated
paths:
- go.*
- .github/workflows/trivy-scan.yml
push:
branches:
- main
paths:
- go.*
- .github/workflows/trivy-scan.yml
jobs:
trivy-scan:
@ -33,7 +35,9 @@ jobs:
# for the PR check, ignore JS-related issues
skip-files: 'yarn.lock,package.json'
- name: Run Trivy vulnerability scanner (SARIF)
uses: aquasecurity/trivy-action@0.28.0
# Note: versions 0.27.0 and 0.28.0 are broken for SARIF output, but it's
# unclear why - worth testing again in the future
uses: aquasecurity/trivy-action@0.26.0
with:
scan-type: 'fs'
scanners: 'vuln'