Skip to content

Fix ghcr authentication in grype scan workflow #75

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 3 commits into from
Closed

Fix ghcr authentication in grype scan workflow #75

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8dd9e6d
Fix ghcr authentication in grype scan workflow
InDieTasten Aug 19, 2024
f11c003
Fix authentication to GHCR for real
InDieTasten Aug 19, 2024
80044b4
Try with dedicated pull step
InDieTasten Aug 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 9 additions & 4 deletions .github/workflows/image-scan-anchore-grype.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,26 +20,31 @@ on:

permissions:
contents: read
packages: read

jobs:
Anchore-Build-Scan:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
packages: read
runs-on: ubuntu-latest
steps:
- name: Check out the code
uses: actions/checkout@v4
- name: Log in to registry
run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Pull image
run: docker pull "ghcr.io/lm-development/aks-sample/aks-sample:latest"
- name: Run the Anchore Grype scan action
uses: anchore/scan-action@d5aa5b6cb9414b0c7771438046ff5bcfa2854ed7
id: scan
with:
image: "ghcr.io/lm-development/aks-sample/aks-sample:latest"
fail-build: false
- name: Upload vulnerability report
uses: github/codeql-action/upload-sarif@v3
with:
Expand Down