Skip to content

Commit

Permalink
chore: Update Trivy vulnerability scanner configuration to include OS…
Browse files Browse the repository at this point in the history
… vulnerabilities and use actions/checkout@v4
  • Loading branch information
Nayrode committed Jun 3, 2024
1 parent dee84f4 commit b1647a3
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 4 deletions.
5 changes: 2 additions & 3 deletions .github/workflows/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -51,12 +51,11 @@ jobs:
uses: aquasecurity/[email protected]
with:
image-ref: 'razano/ctcd'
format: 'template'
template: "@trivy/github-markdown.tpl"
format: 'table'
output: trivy.md
exit-code: '1'
ignore-unfixed: true
vuln-type: 'library'
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'
- run: cat trivy.md >> $GITHUB_STEP_SUMMARY
if: always()
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
FROM gradle:latest AS build
WORKDIR /app
COPY . .
RUN ./gradlew assemblev --no-daemon
RUN ./gradlew assemble --no-daemon

FROM openjdk:23-slim-bookworm AS runtime
COPY --from=build /app/build/libs/ctcd-0.0.1-SNAPSHOT.jar /app/ctcd-0.0.1-SNAPSHOT.jar
Expand Down

0 comments on commit b1647a3

Please sign in to comment.