Skip to content

(maint) Add step to mend scan GHA to report any vulns found #162

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 25, 2025

Conversation

Magisus
Copy link
Contributor

@Magisus Magisus commented Jun 25, 2025

No description provided.

@Magisus
Copy link
Contributor Author

Magisus commented Jun 25, 2025

I guess this isn't going to trigger the run on PR, which makes sense. Going to remove the pull_request trigger I added, and maybe we can merge and see if this works, meaning shows up as a failing job because of the nokogiri vuln.

@Magisus Magisus force-pushed the report-mend-vulns branch from 2f23b7f to 9089dce Compare June 25, 2025 21:28
@Magisus Magisus marked this pull request as ready for review June 25, 2025 21:28
@Magisus Magisus requested a review from a team as a code owner June 25, 2025 21:28
id: vulnerabilities
uses: puppetlabs/get-mend-vulnerabilities@v2
with:
product_token: ${{ secrets.MEND_PRODUCT_TOKEN }}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this secret, the same as the one used for other components in the CD4PE Mend product.

@Magisus Magisus merged commit 280aab2 into main Jun 25, 2025
2 checks passed
@Magisus Magisus deleted the report-mend-vulns branch June 25, 2025 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants