Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Trivy workflow #340

Merged
merged 4 commits into from
Mar 15, 2023
Merged

Add Trivy workflow #340

merged 4 commits into from
Mar 15, 2023

Conversation

waybackarchiver
Copy link
Contributor

@waybackarchiver waybackarchiver commented Mar 14, 2023

Description

Relates to wabarc/.github#1, wabarc/.github#104


Issue Ticket Number

Close #245


Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist

  • I have followed the contributing guidelines of this project as mentioned in CONTRIBUTING.md
  • I have checked to ensure there aren't other open Pull Requests for the same update/change?
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes needed to the documentation

@codecov
Copy link

codecov bot commented Mar 14, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (b2ac78f) 46.46% compared to head (1d66014) 46.46%.

❗ Current head 1d66014 differs from pull request most recent head 39c7414. Consider uploading reports for the commit 39c7414 to get more accurate results

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #340   +/-   ##
=======================================
  Coverage   46.46%   46.46%           
=======================================
  Files          57       57           
  Lines        5172     5172           
=======================================
  Hits         2403     2403           
  Misses       2506     2506           
  Partials      263      263           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

uses: wabarc/.github/.github/workflows/reusable-trivy.yml@main
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results

Check failure

Code scanning / Scorecard

Token-Permissions

score is 8: jobLevel 'security-events' permission set to 'write' Click Remediation section below to solve this issue
needs: publish
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results

Check failure

Code scanning / Scorecard

Token-Permissions

score is 8: jobLevel 'security-events' permission set to 'write' Click Remediation section below to solve this issue
needs: allinone
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results

Check failure

Code scanning / Scorecard

Token-Permissions

score is 8: jobLevel 'security-events' permission set to 'write' Click Remediation section below to solve this issue
@waybackarchiver waybackarchiver marked this pull request as ready for review March 15, 2023 02:01
@waybackarchiver waybackarchiver merged commit fa38c1b into main Mar 15, 2023
@waybackarchiver waybackarchiver deleted the trivy branch March 15, 2023 02:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Use Trivy action
1 participant