mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-10-08 23:21:58 +02:00
Updated CI
This commit is contained in:
@@ -12,6 +12,7 @@ on:
|
||||
- 'docker-compose*.yml'
|
||||
- 'requirements.txt'
|
||||
- 'frontend/package*.json'
|
||||
- '.github/workflows/security.yml'
|
||||
pull_request:
|
||||
paths:
|
||||
- 'backend/**'
|
||||
@@ -20,6 +21,7 @@ on:
|
||||
- 'docker-compose*.yml'
|
||||
- 'requirements.txt'
|
||||
- 'frontend/package*.json'
|
||||
- '.github/workflows/security.yml'
|
||||
workflow_dispatch:
|
||||
# Allow manual trigger
|
||||
|
||||
@@ -73,7 +75,7 @@ jobs:
|
||||
run: docker build -t bambuddy:security-scan .
|
||||
|
||||
- name: Run Trivy vulnerability scanner
|
||||
uses: aquasecurity/trivy-action@0.34.0
|
||||
uses: aquasecurity/trivy-action@0.33.1
|
||||
with:
|
||||
image-ref: 'bambuddy:security-scan'
|
||||
format: 'sarif'
|
||||
@@ -89,7 +91,7 @@ jobs:
|
||||
category: trivy
|
||||
|
||||
- name: Run Trivy for Dockerfile/IaC
|
||||
uses: aquasecurity/trivy-action@0.34.0
|
||||
uses: aquasecurity/trivy-action@0.33.1
|
||||
with:
|
||||
scan-type: 'config'
|
||||
scan-ref: '.'
|
||||
|
||||
Reference in New Issue
Block a user