Fix Snyk scanning and upload results #343
Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
julienp
force-pushed
the
julienp/snyk
branch
2 times, most recently
from
252fd84 to
60b788e
Compare
julienp
added
the
impact/no-changelog-required
|
This currently flags a number of issues https://github.com/pulumi/pulumi-docker-containers/security/code-scanning?page=2&query=is%3Aopen+branch%3Ajulienp%2Fsnyk We do get a fair amount of duplication across the images. Most of them are the recent |
| - name: Free Disk Space (Ubuntu) | ||
| uses: jlumbroso/free-disk-space@main | ||
| with: | ||
| tool-cache: false |
There was a problem hiding this comment.
What leads to tons of disk usage here? Is it the outputs of scanning?
There was a problem hiding this comment.
The image itself is fairly large, plus it download some snyk image. Not sure what precisely causes us to run out of space, but for kitchen-sink it failed with ENOSPC before :/
Fix scanning for all images by correctly setting the platform. Scan results are upload to GitHub code scanning.