[GH actions] Add OSV-Scanner GitHub Actions workflow for vulnerability scanning #4561
Conversation
dautovri
changed the title
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
|
Ah, I see... But no new results are available. The scanner failed for some reason. Have to check the logs... |
dautovri
force-pushed
the
dautovri-OSV-Scanner
branch
4 times, most recently
from
72da047 to
cdbcc02
Compare
|
@dautovri, are you going to fix the Yetus warnings? If you don't want to spend any more time on the PR, I can do it for you. |
dautovri
force-pushed
the
dautovri-OSV-Scanner
branch
from
cdbcc02 to
c6a7311
Compare
|
@dautovri, just an advice: you can run Yetus locally as well, to check how it works |
dautovri
force-pushed
the
dautovri-OSV-Scanner
branch
3 times, most recently
from
6b55a34 to
495262a
Compare
dautovri
force-pushed
the
dautovri-OSV-Scanner
branch
2 times, most recently
from
3782866 to
aab5851
Compare
This pull request introduces a new GitHub Actions workflow to integrate OSV-Scanner for security scanning. The workflow is configured to run on pull requests, scheduled events, and pushes to the master branch. Key changes: .github/workflows/osv-scanner.yml: Added a new workflow file to configure OSV-Scanner for security scanning on pull requests, scheduled events, and pushes to the master branch. The workflow includes permissions setup and job definitions for both scheduled scans and pull request scans. Signed-off-by: Ruslan Dautov <[email protected]>
dautovri
force-pushed
the
dautovri-OSV-Scanner
branch
from
aab5851 to
9254a7c
Compare
This pull request introduces a new GitHub Actions workflow to integrate OSV-Scanner for security scanning. The workflow is configured to run on pull requests, scheduled events, and pushes to the master branch.
Key changes:
.github/workflows/osv-scanner.yml: Added a new workflow file to configure OSV-Scanner for security scanning on pull requests, scheduled events, and pushes to the master branch. The workflow includes permissions setup and job definitions for both scheduled scans and pull request scans.