t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

fix: ensure output dir exists
CI / Test Get Images From Files (pull_request) Successful in 4s
Details
CI / Test scan-image (pull_request) Failing after 6s
Details
CI / Test Setup DB (pull_request) Successful in 6s
Details
CI / Test scan-config (pull_request) Failing after 12s
Details
CI / Test Merge SARIF Files (pull_request) Successful in 23s
Details
CI / Test scan-fs (pull_request) Failing after 1m2s
Details

Browse Source
This commit is contained in:
Timo Behrendt
2026-04-10 19:16:33 +02:00
parent 1bd96bbcef
commit f42efd6245
7 changed files with 25 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scan-config/action.yaml
+4 -4
View File
@@ -10,11 +10,11 @@ inputs:
description: "Host path to the directory to scan (mounted read-only at /scan in the container)"
required: true
cache-dir:
description: "Host path to the Trivy cache directory (mounted read-only at /cache; use the same path as setup-db)"
description: "Host path to the Trivy cache directory (mounted read-only at /cache; created if missing; use the same path as setup-db)"
required: false
default: "${{ runner.temp }}/trivy"
output-dir:
description: "Host directory where the report file is written (mounted read-write at /out)"
description: "Host directory where the report file is written (mounted read-write at /out; created if missing)"
required: true
output-file:
description: "SARIF report file name only (no slashes); written under output-dir"
@@ -43,13 +43,13 @@ runs:
run: |
set -euo pipefail
case "$OUTPUT_FILE" in */*|".."*) echo "FAIL: output-file must be a single file name (no path separators)"; exit 1 ;; esac
mkdir -p "$CACHE_DIR_IN"
mkdir -p "$CACHE_DIR_IN" "$OUTPUT_DIR_IN"
scan_path=$(realpath "$SCAN_PATH_IN")
cache_dir=$(realpath "$CACHE_DIR_IN")
mkdir -p "$OUTPUT_DIR_IN"
output_dir=$(realpath "$OUTPUT_DIR_IN")
test -d "$scan_path" || { echo "FAIL: scan-path is not a directory: $scan_path"; exit 1; }
test -d "$cache_dir" || { echo "FAIL: cache-dir is not a directory: $cache_dir"; exit 1; }
test -d "$output_dir" || { echo "FAIL: output-dir is not a directory: $output_dir"; exit 1; }
docker run --rm \
--name trivy-scan-config \