public_git
/
kaniko
mirror of https://github.com/GoogleContainerTools/kaniko
1
0
Fork 0
Code Issues Releases Wiki Activity

refactor: remove artifact upload from nightly-vulnerabiliy-scan.yml (#3029)

This commit is contained in:
Aaron Prindle 2024-02-26 18:01:27 -08:00 committed by GitHub
parent 8009be9f1e
commit 266aafde28
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/images.yaml vendored
View File

@ -31,6 +31,8 @@ jobs:
- warmer - warmer
include: include:
- image: executor - image: executor
target: kaniko-executor target: kaniko-executor
platforms: linux/amd64,linux/arm64,linux/s390x,linux/ppc64le platforms: linux/amd64,linux/arm64,linux/s390x,linux/ppc64le
@ -64,7 +66,7 @@ jobs:
# Setup auth if not a PR. # Setup auth if not a PR.
- if: github.event_name != 'pull_request' - if: github.event_name != 'pull_request'
uses: google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c # v2.1.2 uses: google-github-actions/auth@a6e2e39c0a0331da29f7fd2c2a20a427e8d3ad1f # v2.1.1
with: with:
credentials_json: '${{ secrets.GCR_DEVOPS_SERVICE_ACCOUNT_KEY }}' credentials_json: '${{ secrets.GCR_DEVOPS_SERVICE_ACCOUNT_KEY }}'
export_environment_variables: true export_environment_variables: true

7
.github/workflows/nightly-vulnerability-scan.yml vendored
View File

@ -36,12 +36,5 @@ jobs:
if grep -q 'No vulnerabilities found' grype-output.txt; then if grep -q 'No vulnerabilities found' grype-output.txt; then
echo "No vulnerabilities found." echo "No vulnerabilities found."
else else
# Create a GitHub issue using GitHub CLI or another method
gh issue create --title "Vulnerabilities Found in Nightly Scan" --body "Vulnerabilities found in the latest image scan. Please check the attached report." --file grype-output.txt gh issue create --title "Vulnerabilities Found in Nightly Scan" --body "Vulnerabilities found in the latest image scan. Please check the attached report." --file grype-output.txt
fi fi
- name: Upload scan result as artifact (optional)
uses: actions/upload-artifact@v2
with:
name: grype-scan-report
path: grype-output.txt