Skip to content

feat(vector): setup new log aggregator #2481

feat(vector): setup new log aggregator

feat(vector): setup new log aggregator #2481

Workflow file for this run

---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Run Aqua Security Trivy vulnerability scanner
on:
push:
branches:
- main
pull_request:
jobs:
trivy:
name: Trivy
runs-on: ubuntu-latest
steps:
# https://github.com/marketplace/actions/harden-runner
- name: Harden Runner
uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
with:
egress-policy: audit
# https://github.com/marketplace/actions/checkout
- name: Checkout Repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
# https://github.com/marketplace/actions/aqua-security-trivy
- name: Run Trivy vulnerability scanner in IaC mode
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0
with:
scan-type: config
hide-progress: false
format: sarif
output: trivy-results.sarif
exit-code: "1"
ignore-unfixed: true
severity: CRITICAL,HIGH
scan-ref: infra/terraform
# Upload the results to GitHub's code scanning dashboard.
# https://github.com/github/codeql-action
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
with:
sarif_file: trivy-results.sarif