-
Notifications
You must be signed in to change notification settings - Fork 11
31 lines (29 loc) · 852 Bytes
/
trivy-scan.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
name: Trivy
on:
workflow_dispatch:
schedule:
- cron: '0 0 * * *'
jobs:
ubuntu-build:
name: Build on Ubuntu
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Set up JDK 17
uses: actions/setup-java@v3
with:
distribution: 'adopt'
java-version: 17.0.7
- name: Build with Gradle
env:
packageUser: ${{ github.actor }}
packagePAT: ${{ secrets.GITHUB_TOKEN }}
run: ./gradlew build -x check -x test --stacktrace --console=plain
# Disabled since we are not using any external libraries
# - name: Run Trivy vulnerability scanner
# uses: aquasecurity/trivy-action@master
# with:
# scan-type: 'fs'
# scan-ref: '/github/workspace/ballerina/lib'
# format: 'table'
# exit-code: '1'