repos/roboluke
4
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 51 Activity

chore(ci): remove Sonar #355

Merged
luke merged 11 commits from luke-patch-1 into main 2025-05-31 13:08:48 +02:00
Conversation 1 Commits 11 Files Changed 4 +21 -2
1 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit aa3c5fbf1f - Show all commits

23
.gitea/workflows/ci.yml
View File

@ -70,9 +70,16 @@ jobs:
# command: snyk # command: snyk
# args: test --all-projects # args: test --all-projects
- name: Trivy Vulnerability Scan - name: Manual Trivy Setup
uses: aquasecurity/trivy-action@0.30.0 uses: aquasecurity/setup-trivy@v0.2.0
with: with:
cache: true
version: v0.61.1
- name: Trivy Vulnerability Scan
uses: aquasecurity/trivy-action@master
with:
skip-setup-trivy: true
scan-type: "fs" scan-type: "fs"
scan-ref: "${{ gitea.workspace }}" scan-ref: "${{ gitea.workspace }}"
exit-code: "1" exit-code: "1"
@ -80,3 +87,15 @@ jobs:
format: "table" format: "table"
severity: "CRITICAL,HIGH,MEDIUM" severity: "CRITICAL,HIGH,MEDIUM"
scanners: "vuln,secret,misconfig,license" scanners: "vuln,secret,misconfig,license"
# - name: Trivy Vulnerability Scan (Docker)
# uses: aquasecurity/trivy-action@master
# with:
# skip-setup-trivy: true
# image-ref: "docker.io/my-organization/my-app:${{ github.sha }}"
# format: "table"
# exit-code: "1"
# ignore-unfixed: true
# vuln-type: 'os,library'
# severity: "CRITICAL,HIGH,MEDIUM"