Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Testing Docker Scout Security Action #53

Closed
wants to merge 15 commits into from
Closed

Testing Docker Scout Security Action #53

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
3c0f7d7
Testing out Docker Scout GitHub Action
tefirman Oct 18, 2024
bfe0fbd
Updating action name to trigger it in the PR
tefirman Oct 18, 2024
cf52a48
Adding DockerHub login to Docker Scout action
tefirman Oct 18, 2024
16c91eb
Adding PR write permissions to Docker Scout action
tefirman Oct 18, 2024
45b26bf
Adding example image to test Docker Scout action
tefirman Oct 18, 2024
63a596b
Testing out just CVE check for Docker Scout action
tefirman Oct 18, 2024
3ad4bad
Testing out pre-build for Docker Scout action
tefirman Oct 18, 2024
0adb13a
Merge branch 'main' into security-action
tefirman Oct 18, 2024
73dbee4
Adding ls to Docker Scout for debugging
tefirman Oct 18, 2024
3bf5dca
Adding ls to Docker Scout for debugging
tefirman Oct 18, 2024
c7c0381
Adding checkout to Docker Scout action
tefirman Oct 18, 2024
0f4da68
Updating versions in bwa Docker image
tefirman Oct 18, 2024
d6f1138
Calling image by tag in Docker Scout
tefirman Oct 18, 2024
b6869ee
Checking if you need login for Docker Scout
tefirman Oct 18, 2024
c8feb15
Adding back login for Docker Scout
tefirman Oct 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 33 additions & 0 deletions .github/workflows/docker-scout.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
name: Docker Scout

on:
pull_request:
types: [opened, reopened, synchronize]

permissions:
pull-requests: write

jobs:
scout:
runs-on: ubuntu-latest
steps:
- name: Login to DockerHub Container Registry
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PW }}
- name: Docker Scout
id: docker-scout
uses: docker/scout-action@v1
with:
command: cves,recommendations
image: getwilds/bwa:latest
sarif-file: sarif.output.json
platform: linux/amd64
summary: true
- name: Upload SARIF result
id: upload-sarif
if: ${{ github.event_name != 'pull_request_target' }}
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: sarif.output.json
8 changes: 4 additions & 4 deletions bwa/Dockerfile_0.7.17
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,10 +14,10 @@ LABEL org.opencontainers.image.licenses=MIT

# Installing prerequisites
RUN apt-get update \
&& apt-get install -y --no-install-recommends build-essential=12.10ubuntu1 wget=1.21.4-1ubuntu4 \
zlib1g-dev=1:1.3.dfsg-3.1ubuntu2 autoconf=2.71-3 automake=1:1.16.5-1.3ubuntu1 \
libncurses-dev=6.4+20240113-1ubuntu2 libbz2-dev=1.0.8-5.1 liblzma-dev=5.6.1+really5.4.5-1 \
libssl-dev=3.0.13-0ubuntu3.1 libcurl4-gnutls-dev=8.5.0-2ubuntu10.1 \
&& apt-get install -y --no-install-recommends build-essential=12.10ubuntu1 wget=1.21.4-1ubuntu4.1 \
zlib1g-dev=1:1.3.dfsg-3.1ubuntu2.1 autoconf=2.71-3 automake=1:1.16.5-1.3ubuntu1 \
libncurses-dev=6.4+20240113-1ubuntu2 libbz2-dev=1.0.8-5.1build0.1 liblzma-dev=5.6.1+really5.4.5-1build0.1 \
libssl-dev=3.0.13-0ubuntu3.4 libcurl4-gnutls-dev=8.5.0-2ubuntu10.4 \
&& rm -rf /var/lib/apt/lists/*

# Pulling and extracting bwa source code
Expand Down
8 changes: 4 additions & 4 deletions bwa/Dockerfile_latest
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,10 +14,10 @@ LABEL org.opencontainers.image.licenses=MIT

# Installing prerequisites
RUN apt-get update \
&& apt-get install -y --no-install-recommends build-essential=12.10ubuntu1 wget=1.21.4-1ubuntu4 \
zlib1g-dev=1:1.3.dfsg-3.1ubuntu2 autoconf=2.71-3 automake=1:1.16.5-1.3ubuntu1 \
libncurses-dev=6.4+20240113-1ubuntu2 libbz2-dev=1.0.8-5.1 liblzma-dev=5.6.1+really5.4.5-1 \
libssl-dev=3.0.13-0ubuntu3.1 libcurl4-gnutls-dev=8.5.0-2ubuntu10.1 \
&& apt-get install -y --no-install-recommends build-essential=12.10ubuntu1 wget=1.21.4-1ubuntu4.1 \
zlib1g-dev=1:1.3.dfsg-3.1ubuntu2.1 autoconf=2.71-3 automake=1:1.16.5-1.3ubuntu1 \
libncurses-dev=6.4+20240113-1ubuntu2 libbz2-dev=1.0.8-5.1build0.1 liblzma-dev=5.6.1+really5.4.5-1build0.1 \
libssl-dev=3.0.13-0ubuntu3.4 libcurl4-gnutls-dev=8.5.0-2ubuntu10.4 \
&& rm -rf /var/lib/apt/lists/*

# Pulling and extracting bwa source code
Expand Down
Loading