This repository has been archived by the owner on Oct 28, 2024. It is now read-only.
forked from XGovFormBuilder/digital-form-builder
-
Notifications
You must be signed in to change notification settings - Fork 1
93 lines (89 loc) · 3.16 KB
/
anchore-scan.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
name: Anchore scan
on:
push:
branches:
- main
- master
paths-ignore:
- "python/**"
workflow_dispatch:
env:
IMAGE_NAME_STUB: "digital-form-builder-dluhc-"
jobs:
designer-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
fetch-depth: 0
- name: Docker compose pull
run: docker-compose pull
- name: Docker layer caching
uses: satackey/action-docker-layer-caching@v0.0.11
continue-on-error: true
with:
# Layers are cached by keys
# docker-layer-caching action has an issue which causes layers to dangle,
# and this will eventually build up and increase pull time significantly
# see https://github.com/satackey/action-docker-layer-caching/issues/55
# ATM solution is to change keys periodically to avoid the dangling layers
# for that just increase the number you see in key and restore-keys below (same number in both keys).
key: digital-form-builder-2-{hash}
restore-keys: |
digital-form-builder-2
- name: Docker compose build
run: |
LAST_TAG='${{ github.run_number }}-rc'
LAST_COMMIT='${{ github.sha }}'
docker-compose build
- name: Scan image
uses: anchore/scan-action@v2
with:
image: "${{ env.IMAGE_NAME_STUB }}designer:latest"
fail-build: false
severity-cutoff: critical
- name: Upload artifact
uses: actions/upload-artifact@v1.0.0
if: ${{ success() || failure() }}
with:
name: AnchoreReports-Designer
path: vulnerabilities.json
runner-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
fetch-depth: 0
- name: Docker compose pull
run: docker-compose pull
- name: Docker layer caching
uses: satackey/action-docker-layer-caching@v0.0.11
continue-on-error: true
with:
# Layers are cached by keys
# docker-layer-caching action has an issue which causes layers to dangle,
# and this will eventually build up and increase pull time significantly
# see https://github.com/satackey/action-docker-layer-caching/issues/55
# ATM solution is to change keys periodically to avoid the dangling layers
# for that just increase the number you see in key and restore-keys below (same number in both keys).
key: digital-form-builder-2-{hash}
restore-keys: |
digital-form-builder-2
- name: Docker compose build
run: |
LAST_TAG='${{ github.run_number }}-rc'
LAST_COMMIT='${{ github.sha }}'
docker-compose build
- name: Scan image
uses: anchore/scan-action@v2
with:
image: "${{ env.IMAGE_NAME_STUB }}runner:latest"
acs-report-enable: true
fail-build: false
severity-cutoff: critical
- name: Upload artifact
uses: actions/upload-artifact@v1.0.0
if: ${{ success() || failure() }}
with:
name: AnchoreReports-Runner
path: vulnerabilities.json