Skip to content

Commit 5b63c4a

Browse files
committed
Enable scanners for nightly run
1 parent aa4dec4 commit 5b63c4a

1 file changed

Lines changed: 30 additions & 30 deletions

File tree

.github/workflows/scan.yaml

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -36,36 +36,36 @@ jobs:
3636
matrix:
3737
product_version: ${{ fromJson(needs.image_list.outputs.matrix) }}
3838
steps:
39-
# - name: Run Grype image
40-
# uses: MaibornWolff/secobserve_actions_templates/actions/SCA/grype_image@main
41-
# with:
42-
# target: docker.stackable.tech/stackable/${{ matrix.product_version.product }}:${{ matrix.product_version.version }}-stackable${{ matrix.product_version.release }}
43-
# report_name: 'dd_import_grype_image.json'
44-
# so_product_name: ${{ matrix.product_version.product }}
45-
# so_api_base_url: https://secobserve.stackable.tech
46-
# so_api_token: ${{ secrets.SECOBSERVE_API_TOKEN }}
47-
# - name: Run Trivy image
48-
# uses: MaibornWolff/secobserve_actions_templates/actions/SCA/trivy_image@main
49-
# with:
50-
# target: 'maibornwolff/dd-import:latest'
51-
# report_name: 'dd_import_trivy_image.json'
52-
# so_api_base_url: https://secobserve.stackable.tech
53-
# so_api_token: ${{ secrets.SECOBSERVE_API_TOKEN }}
54-
# so_product_name: ${{ matrix.product_version.product }}
55-
# so_branch_name: ${{ matrix.product_version.version }}-stackable${{ matrix.product_version.release }}
56-
- name: Scan Remote Image
57-
uses: neuvector/scan-action@main
39+
- name: Run Grype image
40+
uses: MaibornWolff/secobserve_actions_templates/actions/SCA/grype_image@main
41+
with:
42+
target: docker.stackable.tech/stackable/${{ matrix.product_version.product }}:${{ matrix.product_version.version }}-stackable${{ matrix.product_version.release }}
43+
report_name: 'dd_import_grype_image.json'
44+
so_product_name: ${{ matrix.product_version.product }}
45+
so_api_base_url: https://secobserve.stackable.tech
46+
so_api_token: ${{ secrets.SECOBSERVE_API_TOKEN }}
47+
- name: Run Trivy image
48+
uses: MaibornWolff/secobserve_actions_templates/actions/SCA/trivy_image@main
5849
with:
59-
image-repository: ${{ matrix.image }}
60-
image-tag: ${{ matrix.tag }}
61-
output: json
62-
debug: true
50+
target: 'maibornwolff/dd-import:latest'
51+
report_name: 'dd_import_trivy_image.json'
52+
so_api_base_url: https://secobserve.stackable.tech
53+
so_api_token: ${{ secrets.SECOBSERVE_API_TOKEN }}
54+
so_product_name: ${{ matrix.product_version.product }}
55+
so_branch_name: ${{ matrix.product_version.version }}-stackable${{ matrix.product_version.release }}
56+
# - name: Scan Remote Image
57+
# uses: neuvector/scan-action@main
58+
# with:
59+
# image-repository: ${{ matrix.image }}
60+
# image-tag: ${{ matrix.tag }}
61+
# output: json
62+
# debug: true
6363
- name: List files to see if NeuVector outputs something
6464
run: ls
65-
# - name: Upload results
66-
# uses: actions/upload-artifact@v3
67-
# with:
68-
# name: secobserve
69-
# path: |
70-
# dd_import_trivy_image.json
71-
# dd_import_grype_image.json
65+
- name: Upload results
66+
uses: actions/upload-artifact@v3
67+
with:
68+
name: secobserve
69+
path: |
70+
dd_import_trivy_image.json
71+
dd_import_grype_image.json

0 commit comments

Comments
 (0)