Skip to content

Commit 1bef4a5

Browse files
TMP: UID2-7411 CI vuln sanity check (to be reverted)
1 parent 81df7f1 commit 1bef4a5

1 file changed

Lines changed: 21 additions & 0 deletions

File tree

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: TMP Vuln Sanity 7411
2+
on:
3+
push:
4+
branches: [bmz-UID2-7411-tcportal-base-bump]
5+
jobs:
6+
vuln-sanity:
7+
runs-on: ubuntu-latest
8+
steps:
9+
- name: Checkout
10+
uses: actions/checkout@v4
11+
- name: Install trivy 0.72.0
12+
run: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0
13+
- name: Build & scan uid2-tcportal (Dockerfile_uid2)
14+
run: |
15+
docker build --platform linux/amd64 -f Dockerfile_uid2 -t uid2-tcportal-test .
16+
trivy image --platform linux/amd64 --severity CRITICAL,HIGH --scanners vuln --exit-code 1 --ignorefile .trivyignore uid2-tcportal-test
17+
- name: Build & scan euid-tcportal (Dockerfile_euid)
18+
if: ${{ always() }}
19+
run: |
20+
docker build --platform linux/amd64 -f Dockerfile_euid -t euid-tcportal-test .
21+
trivy image --platform linux/amd64 --severity CRITICAL,HIGH --scanners vuln --exit-code 1 --ignorefile .trivyignore euid-tcportal-test

0 commit comments

Comments
 (0)