Skip to content

Commit

Permalink
Update neurodesktop-dev container scan
Browse files Browse the repository at this point in the history
  • Loading branch information
aswinnarayanan committed Mar 21, 2024
1 parent 8cddcb6 commit 10658b3
Showing 1 changed file with 28 additions and 10 deletions.
38 changes: 28 additions & 10 deletions .github/workflows/build-neurodesktop-dev.yml
Original file line number Diff line number Diff line change
Expand Up @@ -138,16 +138,6 @@ jobs:
# uses: rickstaa/[email protected]
# with:
# tag: ${{ env.BUILDDATE }}
# - name: Container image scan
# if: ${{ env.GITHUB_RATE_REMAINING > 0 }}
# uses: aquasecurity/[email protected]
# with:
# image-ref: ${{ env.IMAGEID }}
# format: table
# exit-code: '1'
# severity: CRITICAL
# timeout: 25m0s
# skip-files: /opt/rclone-v1.60.1-linux-amd64/README.txt, /opt/rclone-v1.60.1-linux-amd64/README.html, /opt/rclone-v1.60.1-linux-amd64/rclone.1
# - name: Generate issue on job failure
# if: always() && failure()
# uses: JasonEtco/[email protected]
Expand All @@ -161,3 +151,31 @@ jobs:
# filename: .github/job_failure_issue_template.md
# update_existing: true
# search_existing: open
scan-image:
needs: build-image
runs-on: ubuntu-22.04
steps:
- name: Set environment variables
run: |
IMAGENAME="neurodesktop-dev"
BUILDDATE=`date +%Y-%m-%d`
IMAGEID=ghcr.io/$GITHUB_REPOSITORY/$IMAGENAME
IMAGEID=$(echo $IMAGEID | tr '[A-Z]' '[a-z]')
echo "BUILDDATE=$BUILDDATE"
echo "IMAGEID=$IMAGEID"
echo "IMAGENAME=$IMAGENAME"
echo "BUILDDATE=$BUILDDATE" >> $GITHUB_ENV
echo "IMAGEID=$IMAGEID" >> $GITHUB_ENV
echo "IMAGENAME=$IMAGENAME" >> $GITHUB_ENV
- name: Container image scan
uses: aquasecurity/[email protected]
with:
image-ref: ${{ env.IMAGEID }}:${{ env.BUILDDATE }}
format: table
exit-code: '1'
severity: CRITICAL
timeout: 25m0s
skip-files: /opt/rclone-v1.60.1-linux-amd64/README.txt, /opt/rclone-v1.60.1-linux-amd64/README.html, /opt/rclone-v1.60.1-linux-amd64/rclone.1

0 comments on commit 10658b3

Please sign in to comment.