diff --git a/.github/workflows/sysdig-scan.yml b/.github/workflows/sysdig-scan.yml deleted file mode 100644 index eecfd7998..000000000 --- a/.github/workflows/sysdig-scan.yml +++ /dev/null @@ -1,58 +0,0 @@ -# This workflow uses actions that are not certified by GitHub. -# They are provided by a third-party and are governed by -# separate terms of service, privacy policy, and support -# documentation. - -name: Sysdig - -on: - push: - branches: ["master"] - pull_request: - branches: ["master"] - -permissions: - contents: read - -jobs: - build: - permissions: - checks: write # for sysdiglabs/scan-action to publish the checks - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results - actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status - runs-on: ubuntu-latest - - steps: - - uses: actions/checkout@v3 - - - name: Build the Docker image - # Tag image to be built - # Change ${{ github.repository }} variable by another image name if you want but don't forget changing also image-tag below - run: docker build . --file Dockerfile --tag ${{ github.repository }}:latest - - - name: Sysdig Secure Inline Scan - id: scan - uses: sysdiglabs/scan-action@768d7626a14897e0948ea89c8437dd46a814b163 - with: - # Tag of the image to analyse. - # Change ${{ github.repository }} variable by another image name if you want but don't forget changing also image-tag above - image-tag: ${{ github.repository }}:latest - # API token for Sysdig Scanning auth - sysdig-secure-token: ${{ secrets.SYSDIG_SECURE_TOKEN}} - # Sysdig secure endpoint. Please read: https://docs.sysdig.com/en/docs/administration/saas-regions-and-ip-ranges/ - # US-East https://secure.sysdig.com - # US-West https://us2.app.sysdig.com - # EU https://eu1.app.sysdig.com - sysdig-secure-url: https://us2.app.sysdig.com - dockerfile-path: ./Dockerfile - input-type: docker-daemon - ignore-failed-scan: true - # Sysdig inline scanner requires privileged rights - run-as-user: root - - - uses: github/codeql-action/upload-sarif@v2 - #Upload SARIF file - if: always() - with: - sarif_file: ${{ steps.scan.outputs.sarifReport }} diff --git a/README.md b/README.md index 2261cd5ce..eb3497959 100644 --- a/README.md +++ b/README.md @@ -22,7 +22,6 @@ Sample web application based on k8s. Focus on connecting components, setting k8s [![Dependency Review](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/dependency-review.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/dependency-review.yml) [![DevSkim](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/devskim.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/devskim.yml) [![Snyk](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/snyk-infrastructure.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/snyk-infrastructure.yml) -[![Sysdig](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/sysdig-scan.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/sysdig-scan.yml) [![Kubesec](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/kubesec.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/kubesec.yml) [![Codacy](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/codacy.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/codacy.yml) [![pmd](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/pmd.yml/badge.svg)](https://github.com/yurake/k8s-3tier-webapp/actions/workflows/pmd.yml)