t.behrendt/sec-workflows
1
0
Fork 0
Code Issues 2 Pull Requests 4 Actions Releases Activity

Compare commits

base: t.behrendt:4dde0beec8ac4781e9da3e43fcb27eb26c7d1a92
Branches Tags
t.behrendt:main t.behrendt:refactor-to-osv-scanner t.behrendt:renovate/https-gitea.t000-n.de-t.behrendt-conventional-semantic-git-tag-increment-0.x t.behrendt:renovate/https-gitea.t000-n.de-t.behrendt-actions-0.x t.behrendt:renovate/https-gitea.t000-n.de-t.behrendt-trivy-actions-digest
t.behrendt:0.2.4 t.behrendt:0.2.3 t.behrendt:0.2.2 t.behrendt:0.2.1 t.behrendt:0.2.0 t.behrendt:0.1.2-rc-97ed0a241c52e8ce2fe90ae3b2c551d7256858a3 t.behrendt:0.1.1 t.behrendt:0.2.0-rc-4dde0beec8ac4781e9da3e43fcb27eb26c7d1a92 t.behrendt:0.1.0 t.behrendt:0.1.0-rc-f0811239154d86afcc96faf56f8fd7c1f14a9f7c
..
compare: t.behrendt:97ed0a241c52e8ce2fe90ae3b2c551d7256858a3
Branches Tags
t.behrendt:refactor-to-osv-scanner t.behrendt:renovate/https-gitea.t000-n.de-t.behrendt-conventional-semantic-git-tag-increment-0.x t.behrendt:renovate/https-gitea.t000-n.de-t.behrendt-actions-0.x t.behrendt:renovate/https-gitea.t000-n.de-t.behrendt-trivy-actions-digest t.behrendt:main
t.behrendt:0.2.4 t.behrendt:0.2.3 t.behrendt:0.2.2 t.behrendt:0.2.1 t.behrendt:0.2.0 t.behrendt:0.1.2-rc-97ed0a241c52e8ce2fe90ae3b2c551d7256858a3 t.behrendt:0.1.1 t.behrendt:0.2.0-rc-4dde0beec8ac4781e9da3e43fcb27eb26c7d1a92 t.behrendt:0.1.0 t.behrendt:0.1.0-rc-f0811239154d86afcc96faf56f8fd7c1f14a9f7c

4 Commits
4dde0beec8 ... 97ed0a241c

Author SHA1 Message Date
Timo Behrendt
97ed0a241c pass server arg on fs scan 2026-02-26 21:58:46 +01:00
Timo Behrendt
fe4fa79289 bump trivy-actions to image fixed version 2026-02-26 21:56:48 +01:00
Timo Behrendt
9973ffe899 feat: add fs scan 2026-02-26 21:55:16 +01:00
Timo Behrendt
18b347368a chore: bump trivy-actions (#4)
All checks were successful
CD / Release (push) Successful in 5s
Details 
Reviewed-on: t.behrendt/trivy-workflows#4
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
 2026-02-26 21:54:54 +01:00
1 changed files with 14 additions and 11 deletions
Expand all files Collapse all files

25
.gitea/workflows/run-trivy-scan.yaml
View File

@@ -42,8 +42,8 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@1.4.4
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@1.4.4
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
- run: |
trivy config --cache-dir "$TRIVY_CACHE_DIR" --exit-code 0 --format sarif --output config-sarif.json .
env:
@@ -58,11 +58,11 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@1.4.4
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@1.4.4
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
- name: Get images from files
id: get-images
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/get-images-from-files@1.4.4
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/get-images-from-files@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
with:
files: ${{ inputs.image-scan-files }}
- name: Pull images
@@ -102,7 +102,7 @@ jobs:
TRIVY_CACHE_DIR: ${{ runner.temp }}/trivy
- name: Merge image SARIF files
if: steps.get-images.outputs.images != '[]' && steps.scan.outputs.count != '0'
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@1.4.4
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
with:
files: ${{ steps.scan.outputs.files }}
output-file: image-sarif.json
@@ -120,17 +120,20 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@1.4.4
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@1.4.4
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
- uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
- run: |
trivy fs --cache-dir "$TRIVY_CACHE_DIR" --exit-code 0 --format sarif --output fs-sarif.json --scanners vuln .
server="${{ inputs.trivy-server-url }}"
args=(fs --cache-dir "$TRIVY_CACHE_DIR" --exit-code 0 --format sarif --output fs-sarif.json --scanners vuln .)
[ -n "$server" ] && args+=(--server "$server")
trivy "${args[@]}"
env:
TRIVY_CACHE_DIR: ${{ runner.temp }}/trivy
- uses: https://github.com/ChristopherHX/gitea-upload-artifact@v4
with:
name: fs-sarif
path: fs-sarif.json
merge:
runs-on: ubuntu-latest
needs: [config-scan, image-scan, fs-scan]
@@ -174,7 +177,7 @@ jobs:
echo "EOF" >> "$GITHUB_OUTPUT"
- name: Merge SARIF files
id: merge-step
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@1.4.4
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/merge-sarif-files@83a7cef9f19e3a5a30311839f99f83690a490cf8 # 1.4.5
with:
files: ${{ steps.file-list.outputs.files }}
output-file: merged-sarif.json