mirror of
https://github.com/grafana/grafana.git
synced 2025-02-25 18:55:37 -06:00
Chore: Remove CircleCI (#35014)
This commit is contained in:
parent
f4a40a4d85
commit
a9f652ab7a
@ -1,60 +0,0 @@
|
|||||||
version: 2.1
|
|
||||||
|
|
||||||
aliases:
|
|
||||||
# Workflow filters
|
|
||||||
- &filter-only-main
|
|
||||||
branches:
|
|
||||||
only: main
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
scan-docker-image:
|
|
||||||
description: "Scans a docker image for vulnerabilities using trivy"
|
|
||||||
parameters:
|
|
||||||
image:
|
|
||||||
type: string
|
|
||||||
tag:
|
|
||||||
type: string
|
|
||||||
docker:
|
|
||||||
- image: circleci/buildpack-deps:stretch
|
|
||||||
steps:
|
|
||||||
- setup_remote_docker
|
|
||||||
- restore_cache:
|
|
||||||
key: vulnerability-db
|
|
||||||
- run:
|
|
||||||
name: Install trivy
|
|
||||||
command: |
|
|
||||||
VERSION=$(
|
|
||||||
curl --silent "https://api.github.com/repos/aquasecurity/trivy/releases/latest" | \
|
|
||||||
grep '"tag_name":' | \
|
|
||||||
sed -E 's/.*"v([^"]+)".*/\1/'
|
|
||||||
)
|
|
||||||
|
|
||||||
wget https://github.com/aquasecurity/trivy/releases/download/v${VERSION}/trivy_${VERSION}_Linux-64bit.tar.gz
|
|
||||||
tar zxvf trivy_${VERSION}_Linux-64bit.tar.gz
|
|
||||||
sudo mv trivy /usr/local/bin
|
|
||||||
- run:
|
|
||||||
name: Clear trivy cache
|
|
||||||
command: trivy --clear-cache
|
|
||||||
- run:
|
|
||||||
name: Scan Docker image for unkown/low/medium vulnerabilities
|
|
||||||
command: trivy --exit-code 0 --severity UNKNOWN,LOW,MEDIUM << parameters.image >>:<< parameters.tag >>
|
|
||||||
- run:
|
|
||||||
name: Scan Docker image for high/critical vulnerabilities
|
|
||||||
command: trivy --exit-code 1 --severity HIGH,CRITICAL << parameters.image >>:<< parameters.tag >>
|
|
||||||
- save_cache:
|
|
||||||
key: vulnerability-db
|
|
||||||
paths:
|
|
||||||
- $HOME/.cache/trivy
|
|
||||||
|
|
||||||
workflows:
|
|
||||||
nightly:
|
|
||||||
triggers:
|
|
||||||
- schedule:
|
|
||||||
cron: "0 0 * * *"
|
|
||||||
filters: *filter-only-main
|
|
||||||
jobs:
|
|
||||||
- scan-docker-image:
|
|
||||||
matrix:
|
|
||||||
parameters:
|
|
||||||
image: [grafana/grafana, grafana/grafana-enterprise]
|
|
||||||
tag: [latest, main, latest-ubuntu, main-ubuntu]
|
|
Loading…
Reference in New Issue
Block a user