tebarius/Docker-Flask-QR
1
0
Fork 0
mirror of https://github.com/tebarius/Docker-Flask-QR.git synced 2026-02-04 04:28:39 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

rework workflows
Some checks failed
trivy-scan-image / trivy_image_scan (push) Failing after 31s
Details

Browse Source
This commit is contained in:
Martin Kayser
2026-01-18 19:32:57 +01:00
parent 05615dc813
commit 2a5b133ba7
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/workflows/create_and_push_multiarch_container.yml
View File

@@ -19,7 +19,7 @@ env:
jobs: jobs:
release-image: release-image:
runs-on: ubuntu-latest runs-on: build-ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3

7
.gitea/workflows/trivy_image_scan.yml
View File

@@ -8,9 +8,12 @@ on:
description: 'Tag für das zu scannende Docker-Image z.B. latest' description: 'Tag für das zu scannende Docker-Image z.B. latest'
required: true required: true
default: 'latest' default: 'latest'
schedule:
- cron: '30 1 * * 5'
env: env:
image_name_gitea: flask-qr image_name_gitea: flask-qr
image_tag: ${{ github.event.inputs.image_tag || 'latest' }}
registry_gitea: gitea.tebarius.duckdns.org registry_gitea: gitea.tebarius.duckdns.org
user: tebarius user: tebarius
@@ -22,8 +25,10 @@ jobs:
- name: Scan image with trivy - name: Scan image with trivy
run: | run: |
trivy image \ trivy image \
--username ${{ env.user }} \
--password ${{ secrets.DOCKER_PULL_TOKEN }} \
--exit-code 1 \ --exit-code 1 \
--scanners vuln,misconfig,secret \ --scanners vuln,misconfig,secret \
--severity MEDIUM,HIGH,CRITICAL \ --severity MEDIUM,HIGH,CRITICAL \
--ignore-unfixed \ --ignore-unfixed \
${{ env.registry_gitea }}/${{ env.user }}/${{ env.image_name_gitea }}:${{ github.event.inputs.image_tag }} ${{ env.registry_gitea }}/${{ env.user }}/${{ env.image_name_gitea }}:${{ env.image_tag }}