wehub-resource-sync
bf2343b7e4
Integration Tests - MySQL + Elasticsearch / Detect Changes (push) Waiting to run
Integration Tests - MySQL + Elasticsearch / integration-tests-mysql-elasticsearch (push) Blocked by required conditions
Integration Tests - PostgreSQL + Elasticsearch + Redis / Detect Changes (push) Waiting to run
Integration Tests - PostgreSQL + Elasticsearch + Redis / integration-tests-postgres-elasticsearch-redis (push) Blocked by required conditions
Integration Tests - PostgreSQL + OpenSearch / Detect Changes (push) Waiting to run
Integration Tests - PostgreSQL + OpenSearch / integration-tests-postgres-opensearch (push) Blocked by required conditions
Java Checkstyle / java-checkstyle (push) Waiting to run
Maven Collate Tests / maven-collate-ci (push) Waiting to run
OpenMetadata Service Unit Tests / Detect Changes (push) Waiting to run
OpenMetadata Service Unit Tests / openmetadata-service-unit-tests (push) Blocked by required conditions
OpenMetadata Service Unit Tests / k8s_operator-unit-tests (push) Blocked by required conditions
OpenMetadata Service Unit Tests / openmetadata-service-unit-tests-status (push) Blocked by required conditions
Publish Package to Maven Central Repository / publish-maven-packages (push) Waiting to run
58 lines
1.6 KiB
YAML
58 lines
1.6 KiB
YAML
name: Trivy Scan For OpenMetadata Ingestion Base Slim Docker Image
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: trivy-ingestion-base-slim-scan-${{ github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
build-and-scan:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Free Disk Space (Ubuntu)
|
|
uses: jlumbroso/free-disk-space@main
|
|
with:
|
|
tool-cache: false
|
|
android: true
|
|
dotnet: true
|
|
haskell: true
|
|
large-packages: false
|
|
swap-storage: true
|
|
docker-images: false
|
|
|
|
- name: Checkout Repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Prepare for Docker Build
|
|
id: prepare
|
|
uses: ./.github/actions/prepare-for-docker-build
|
|
with:
|
|
image: openmetadata-ingestion-base-slim
|
|
tag: trivy
|
|
is_ingestion: true
|
|
|
|
|
|
- name: Build Docker Image
|
|
run: |
|
|
docker build -t openmetadata-ingestion-base-slim:trivy -f ingestion/operators/docker/Dockerfile.ci .
|
|
|
|
|
|
- name: Run Trivy Image Scan
|
|
id: trivy_scan
|
|
uses: aquasecurity/trivy-action@0.35.0
|
|
with:
|
|
scan-type: "image"
|
|
image-ref: openmetadata-ingestion-base-slim:trivy
|
|
hide-progress: false
|
|
ignore-unfixed: true
|
|
severity: "HIGH,CRITICAL"
|
|
skip-dirs: "/opt/airflow/dags,/home/airflow/ingestion/pipelines"
|
|
scan-ref: .
|
|
format: 'template'
|
|
template: "@.github/trivy/templates/github.tpl"
|
|
output: "trivy-result-ingestion-base-slim.md"
|
|
env:
|
|
TRIVY_DISABLE_VEX_NOTICE: "true"
|