Commit Graph

17 Commits

Author SHA1 Message Date
t.behrendt 6e5f62d4dd feat: add safely wrapped scan-* workflows
CI / Test Merge SARIF Files (pull_request) Successful in 4s
CI / Test scan-config (pull_request) Failing after 7s
CI / Test scan-image (pull_request) Failing after 6s
CI / Test Setup DB (pull_request) Successful in 12s
CI / Test Get Images From Files (pull_request) Successful in 14s
CI / Test scan-fs (pull_request) Failing after 1m2s
2026-04-10 19:05:43 +02:00
t.behrendt 3d3c7b3265 adjust tests
CI / Test Setup DB (pull_request) Successful in 5s
CI / Test Merge SARIF Files (pull_request) Successful in 10s
CI / Test Get Images From Files (pull_request) Successful in 14s
2026-04-10 18:43:14 +02:00
t.behrendt 77fa83fb31 feat: add merge-sarif (#37)
CD / Release (push) Successful in 6s
Adding a action to merge multiple SARIF files into one. Also contains a test and example files.

Reviewed-on: t.behrendt/trivy-actions#37
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2026-02-15 12:07:03 +01:00
t.behrendt 067d321f7a ci: pin various actions to a proper semver version (#38)
CD / Release (push) Successful in 15s
Pinning to the full semver where it is missing. Some digests updated as well.
Also fixed some formatting, there were extra spaces.

Reviewed-on: t.behrendt/trivy-actions#38
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2026-02-14 19:32:40 +01:00
t.behrendt d3dadf6c27 refactor(get-images-from-files): to return json array (#31)
CD / Release (push) Successful in 6s
Working with a proper JSON array is way better than the comma separated list, as the JSON array can be directly fed into subsequent GitHub actions, without re-formatting.

Changes don't need to be treated as breaking, as there is no productive consumer yet.

Reviewed-on: t.behrendt/trivy-actions#31
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2026-02-05 20:33:05 +01:00
t.behrendt 9411465688 feat(get-images-from-files): add support for helm values (#29)
CD / Release (push) Successful in 13s
Adding support for images inside of helm value files as per helm convention.
Limitation: Default images the chart may propose are not exposed and therefore not supported, only what's specifically mentioned in the values file.

Reviewed-on: t.behrendt/trivy-actions#29
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-02-05 17:29:01 +01:00
t.behrendt 2269b09740 docs(get-images-from-files): document compose support (#28)
CD / Release (push) Successful in 5s
get-images-from-files already supports compose files. This PR explicitly documents the compatibility and includes a test.

Reviewed-on: t.behrendt/trivy-actions#28
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-02-05 15:29:37 +01:00
t.behrendt a076c9d732 feat: add get-images-from-files action (#27)
CD / Release (push) Successful in 11s
Reviewed-on: t.behrendt/trivy-actions#27
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-02-05 14:52:41 +01:00
renovate-bot cde02f6bc2 chore(deps): update actions/checkout digest to de0fac2 (#26)
CD / Release (push) Successful in 12s
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) ([changelog](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8..de0fac2e4500dabe0009e67214ff5f5447ce83dd)) | action | digest | `8e8c483` → `de0fac2` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xNCIsInVwZGF0ZWRJblZlciI6IjQyLjkyLjE0IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJkZXBzIl19-->

Reviewed-on: t.behrendt/trivy-actions#26
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>
2026-02-05 10:37:52 +01:00
renovate-bot e3aa8997f7 chore(deps): update actions/checkout digest to 8e8c483 (#16)
CD / Release (push) Successful in 13s
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | digest | `1af3b93` -> `8e8c483` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0Mi4xMC41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJkZXBzIl19-->

Reviewed-on: t.behrendt/trivy-actions#16
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>
2025-12-07 09:59:13 +01:00
renovate-bot a5d54fcaeb chore(deps): update actions/checkout action to v6 (#17)
CD / Release (push) Successful in 18s
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | major | `v5` -> `v6` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6`](https://github.com/actions/checkout/compare/v5...v6)

[Compare Source](https://github.com/actions/checkout/compare/v5...v6)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xMC41IiwidXBkYXRlZEluVmVyIjoiNDIuMTAuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYWN0aW9uIiwiZGVwcyJdfQ==-->

Reviewed-on: t.behrendt/trivy-actions#17
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>
2025-12-04 16:19:54 +01:00
t.behrendt 8df2386e42 feat(setup-trivy): use latest as default version (#15)
CD / Release (push) Successful in 11s
Using the "latest" released version of Trivy as the default version.
We always first resolve latest to an actual version to allow the cache to work properly.

Reviewed-on: t.behrendt/trivy-actions#15
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-11-08 19:48:17 +01:00
t.behrendt 0c324d36cf chore(setup-db): change cache-dir default to runner.temp (#13)
CD / Release (push) Successful in 12s
Reviewed-on: t.behrendt/trivy-actions#13
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-11-08 19:38:06 +01:00
t.behrendt f7ecf84dfe feat(setup-trivy)!: automatically determine arch (#14)
CD / Release (push) Successful in 12s
Mapping x86_64 to "64bit" and aarch64 to "ARM64" as this is how Trivy names their releases.
Adjusted CICD to test-run both amd64 and arm64 versions.

Reviewed-on: t.behrendt/trivy-actions#14
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-11-08 19:22:30 +01:00
renovate-bot 17b892e6b6 chore(deps): pin dependencies (#9)
CD / Release (push) Successful in 12s
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/cache](https://github.com/actions/cache) | action | pinDigest |  -> `0057852` |
| [actions/checkout](https://github.com/actions/checkout) | action | pinDigest |  -> `08c6903` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuMyIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJkZXBzIl19-->

Reviewed-on: t.behrendt/trivy-actions#9
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>
2025-11-08 17:45:07 +01:00
t.behrendt 463eaebe9f feat: add setup-db (#11)
CD / Release (push) Successful in 14s
Reviewed-on: t.behrendt/trivy-actions#11
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-11-08 17:31:15 +01:00
t.behrendt 28b62b04e8 feat: add setup-trivy (#1)
CD / Release (push) Successful in 6s
Reviewed-on: t.behrendt/trivy-actions#1
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
2025-09-25 19:24:18 +02:00