Skip to content

Bump ubuntu/ubuntu from 4f5ca1c to 243a61c #104

Bump ubuntu/ubuntu from 4f5ca1c to 243a61c

Bump ubuntu/ubuntu from 4f5ca1c to 243a61c #104

Workflow file for this run

---
name: Scan Image
on:
pull_request:
branches:
- main
permissions: {}
jobs:
scan-image:
name: Scan Image
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- name: Checkout
id: checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Build Image
id: build_image
uses: docker/build-push-action@1ca370b3a9802c92e886402e0dd88098a2533b12 # v6.4.1
with:
push: false
load: true
tags: analytical-platform-actions-runner
- name: Scan Image
id: scan_image
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # v0.24.0
with:
image-ref: analytical-platform-actions-runner
exit-code: 1
format: sarif
output: trivy-results.sarif
severity: CRITICAL
limit-severities-for-sarif: true
- name: Upload SARIF
if: always()
id: upload_sarif
uses: github/codeql-action/upload-sarif@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
with:
sarif_file: trivy-results.sarif
- name: Scan Image (On SARIF Scan Failure)
if: failure() && steps.scan_image.outcome == 'failure'
id: scan_image_on_failure
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # v0.24.0
with:
image-ref: analytical-platform-actions-runner
exit-code: 1
format: table
severity: CRITICAL