Skip to content

Commit 1ae8884

Browse files
authored
revert(grype): Reverting #164, #167 (#171)
1 parent de77c3b commit 1ae8884

File tree

2 files changed

+1
-44
lines changed

2 files changed

+1
-44
lines changed

.github/workflows/_test_build_fake_prerelease.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
- shell: bash
5656
run: git tag "$TAG"
5757
- name: Download artifact from previous job
58-
uses: actions/download-artifact@v4.1.3
58+
uses: actions/download-artifact@v4
5959
with:
6060
name: windows-packages
6161
- name: Extract .exe

.github/workflows/reusable_security.yaml

Lines changed: 0 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,6 @@ on:
1616
type: string
1717
default: ''
1818

19-
permissions:
20-
contents: read
21-
security-events: write
22-
2319
jobs:
2420
trivy:
2521
name: Trivy security scan
@@ -63,42 +59,3 @@ jobs:
6359
if: ${{ github.event.schedule }} # Upload sarif when running periodically
6460
with:
6561
sarif_file: 'trivy-results.sarif'
66-
category: trivy
67-
68-
grype:
69-
name: Grype security scan
70-
runs-on: ubuntu-latest
71-
steps:
72-
- name: Checkout code
73-
uses: actions/checkout@v4
74-
75-
- name: Run Grype vulnerability scanner in repo mode
76-
uses: anchore/scan-action@v7
77-
if: ${{ ! github.event.schedule }} # Do not run inline checks when running periodically
78-
id: grype-inline
79-
with:
80-
path: "."
81-
fail-build: true
82-
severity-cutoff: high
83-
only-fixed: true
84-
cache-db: true
85-
output-format: table
86-
87-
88-
- name: Run Grype vulnerability scanner sarif output
89-
uses: anchore/scan-action@v7
90-
if: ${{ github.event.schedule }} # Generate sarif when running periodically
91-
id: grype-sarif
92-
with:
93-
path: "."
94-
output-format: sarif
95-
output-file: grype-results.sarif
96-
only-fixed: true
97-
cache-db: true
98-
99-
- name: Upload Grype scan results to GitHub Security tab
100-
uses: github/codeql-action/upload-sarif@v3
101-
if: ${{ github.event.schedule }} # Upload sarif when running periodically
102-
with:
103-
sarif_file: 'grype-results.sarif'
104-
category: grype

0 commit comments

Comments
 (0)