File tree Expand file tree Collapse file tree 2 files changed +1
-44
lines changed
Expand file tree Collapse file tree 2 files changed +1
-44
lines changed Original file line number Diff line number Diff line change 5555 - shell : bash
5656 run : git tag "$TAG"
5757 - name : Download artifact from previous job
58- uses : actions/download-artifact@v4.1.3
58+ uses : actions/download-artifact@v4
5959 with :
6060 name : windows-packages
6161 - name : Extract .exe
Original file line number Diff line number Diff line change 1616 type : string
1717 default : ' '
1818
19- permissions :
20- contents : read
21- security-events : write
22-
2319jobs :
2420 trivy :
2521 name : Trivy security scan
6359 if : ${{ github.event.schedule }} # Upload sarif when running periodically
6460 with :
6561 sarif_file : ' trivy-results.sarif'
66- category : trivy
67-
68- grype :
69- name : Grype security scan
70- runs-on : ubuntu-latest
71- steps :
72- - name : Checkout code
73- uses : actions/checkout@v4
74-
75- - name : Run Grype vulnerability scanner in repo mode
76- uses : anchore/scan-action@v7
77- if : ${{ ! github.event.schedule }} # Do not run inline checks when running periodically
78- id : grype-inline
79- with :
80- path : " ."
81- fail-build : true
82- severity-cutoff : high
83- only-fixed : true
84- cache-db : true
85- output-format : table
86-
87-
88- - name : Run Grype vulnerability scanner sarif output
89- uses : anchore/scan-action@v7
90- if : ${{ github.event.schedule }} # Generate sarif when running periodically
91- id : grype-sarif
92- with :
93- path : " ."
94- output-format : sarif
95- output-file : grype-results.sarif
96- only-fixed : true
97- cache-db : true
98-
99- - name : Upload Grype scan results to GitHub Security tab
100- uses : github/codeql-action/upload-sarif@v3
101- if : ${{ github.event.schedule }} # Upload sarif when running periodically
102- with :
103- sarif_file : ' grype-results.sarif'
104- category : grype
You can’t perform that action at this time.
0 commit comments