add osv-scanner config for correcting go version used

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
metal3-io · Nov 11, 2024 · 9e6275e · 9e6275e
1 parent 4ed14e5
commit 9e6275e
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 28 deletions.
diff --git a/.github/osv-scanner.toml b/.github/osv-scanner.toml
@@ -0,0 +1,2 @@
+GoVersionOverride = "1.22.8"
+
diff --git a/.github/workflows/osv-scanner-scan.yml b/.github/workflows/osv-scanner-scan.yml
@@ -1,14 +1,13 @@
-# This file is adapted from https://github.com/google/osv-scanner
-
+# runs vulnerability scans and add them to Github Security tab
 
 name: OSV-Scanner Scan
 
 on:
   schedule:
   - cron: "12 6 * * 1"
+  workflow_dispatch:
+
 
-# Restrict jobs in this workflow to have no permissions by default; permissions
-# should be granted per job as needed using a dedicated `permissions` block
 permissions: {}
 
 jobs:
@@ -20,27 +19,29 @@ jobs:
     if: ${{ github.repository == 'metal3-io/ip-address-manager' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Calculate go version
-        id: vars
-        run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT
-      - name: Set up Go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
-        with:
-          go-version: ${{ steps.vars.outputs.go_version }}
-      - name: Install OSV Scanner
-        run: go install github.com/google/osv-scanner/cmd/osv-scanner@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1
-      - name: Run OSV Scanner
-        run: osv-scanner scan --format json --output results.json --recursive --skip-git ./
-        continue-on-error: true
-      - name: "Run OSV Scanner Reporter"
-        uses: google/osv-scanner/actions/reporter@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1
-        with:
-           scan-args: |-
-            --output=results.sarif
-            --new=results.json
-            --gh-annotations=false
-      - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: results.sarif
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Calculate go version
+      id: vars
+      run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT
+    - name: Set up Go
+      uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+      with:
+        go-version: ${{ steps.vars.outputs.go_version }}
+    - name: Install OSV Scanner
+      run: go install
+        github.com/google/osv-scanner/cmd/osv-scanner@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1
+    - name: Run OSV Scanner
+      run: osv-scanner scan --format json --output results.json --recursive --skip-git
+        ./
+      continue-on-error: true
+    - name: "Run OSV Scanner Reporter"
+      uses: google/osv-scanner/actions/reporter@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1
+      with:
+        scan-args: |-
+          --output=results.sarif
+          --new=results.json
+          --gh-annotations=false
+    - name: Upload SARIF file
+      uses: github/codeql-action/upload-sarif@v2
+      with:
+        sarif_file: results.sarif