@@ -146,40 +146,40 @@ jobs:
146146 go-version-file : go.mod
147147 go-package : ./...
148148
149- # checkDockerImage:
150- # runs-on: ubuntu-latest
151- # name: scan Docker Image with Trivy
152- # steps:
153- # - name: Checkout code
154- # uses: actions/checkout@722adc63f1aa60a57ec37892e133b1d319cae598 #2.0.0
149+ checkDockerImage :
150+ runs-on : ubuntu-latest
151+ name : scan Docker Image with Trivy
152+ steps :
153+ - name : Checkout code
154+ uses : actions/checkout@722adc63f1aa60a57ec37892e133b1d319cae598 # 2.0.0
155155
156156
157- # - name: Set up Docker
158- # uses: docker/setup-buildx-action@cf09c5c41b299b55c366aff30022701412eb6ab0 #v1.0.0
157+ # - name: Set up Docker
158+ # uses: docker/setup-buildx-action@cf09c5c41b299b55c366aff30022701412eb6ab0 #v1.0.0
159159
160- # - name: Log in to Docker Hub
161- # uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b #v2
162- # with:
163- # username: ${{ secrets.DOCKER_USERNAME }}
164- # password: ${{ secrets.DOCKER_PASSWORD }}
165- # - name: Build the project
166- # run: go build -o ./cx ./cmd
167- # - name: Build Docker image
168- # run: docker build -t ast-cli:${{ github.sha }} .
169- # - name: Run Trivy scanner without downloading DBs
170- # uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 #v0.35.0
171- # with:
172- # scan-type: 'image'
173- # image-ref: ast-cli:${{ github.sha }}
174- # format: 'table'
175- # exit-code: '1'
176- # ignore-unfixed: true
177- # vuln-type: 'os,library'
178- # output: './trivy-image-results.txt'
179- # env:
180- # TRIVY_SKIP_JAVA_DB_UPDATE: true
160+ # - name: Log in to Docker Hub
161+ # uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b #v2
162+ # with:
163+ # username: ${{ secrets.DOCKER_USERNAME }}
164+ # password: ${{ secrets.DOCKER_PASSWORD }}
165+ - name : Build the project
166+ run : go build -o ./cx ./cmd
167+ - name : Build Docker image
168+ run : docker build -t ast-cli:${{ github.sha }} .
169+ - name : Run Trivy scanner without downloading DBs
170+ uses : aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
171+ with :
172+ scan-type : ' image'
173+ image-ref : ast-cli:${{ github.sha }}
174+ format : ' table'
175+ exit-code : ' 1'
176+ ignore-unfixed : true
177+ vuln-type : ' os,library'
178+ output : ' ./trivy-image-results.txt'
179+ env :
180+ TRIVY_SKIP_JAVA_DB_UPDATE : true
181181
182- # - name: Inspect action report
183- # if: always()
184- # shell: bash
185- # run: cat ./trivy-image-results.txt
182+ - name : Inspect action report
183+ if : always()
184+ shell : bash
185+ run : cat ./trivy-image-results.txt
0 commit comments