tebarius/Docker-404-games
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add triviy-imagge-scan-job for all platforms
All checks were successful
trivy-scan-image / trivy_image_scan (push) Successful in 36s
Details

Browse Source
This commit is contained in:
Martin Kayser
2026-02-15 14:00:53 +01:00
parent 0759a04611
commit 893dfd4d56
1 changed files with 35 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
.gitea/workflows/trivy_scan_image.yml
View File

@@ -22,7 +22,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: aquasec/trivy:latest container: aquasec/trivy:latest
steps: steps:
- name: Scan image with trivy - name: Scan linux/amd64-image
run: | run: |
trivy image \ trivy image \
--username ${{ env.user }} \ --username ${{ env.user }} \
@@ -31,4 +31,38 @@ jobs:
--scanners vuln,misconfig,secret \ --scanners vuln,misconfig,secret \
--severity HIGH,CRITICAL \ --severity HIGH,CRITICAL \
--ignore-unfixed \ --ignore-unfixed \
--platform linux/amd64 \
${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}
- name: Scan linux/386-image
run: |
trivy image \
--username ${{ env.user }} \
--password ${{ secrets.DOCKER_PULL_TOKEN }} \
--exit-code 1 \
--scanners vuln,misconfig,secret \
--severity HIGH,CRITICAL \
--ignore-unfixed \
--platform linux/386 \
${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}
- name: Scan linux/arm64-image
run: |
trivy image \
--username ${{ env.user }} \
--password ${{ secrets.DOCKER_PULL_TOKEN }} \
--exit-code 1 \
--scanners vuln,misconfig,secret \
--severity HIGH,CRITICAL \
--ignore-unfixed \
--platform linux/arm64 \
${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}
- name: Scan linux/arm/v7-image
run: |
trivy image \
--username ${{ env.user }} \
--password ${{ secrets.DOCKER_PULL_TOKEN }} \
--exit-code 1 \
--scanners vuln,misconfig,secret \
--severity HIGH,CRITICAL \
--ignore-unfixed \
--platform linux/arm/v7 \
${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }} ${{ env.registry }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}