Skip to content

Commit

Permalink
Disable scan
Browse files Browse the repository at this point in the history
  • Loading branch information
alexanderM91 committed Oct 17, 2024
1 parent 74d4542 commit d50ad7b
Showing 1 changed file with 97 additions and 97 deletions.
194 changes: 97 additions & 97 deletions .github/workflows/security-scan.yml
Original file line number Diff line number Diff line change
@@ -1,97 +1,97 @@
name: Build and Scan Docker Images with Trivy && Trufflehog

on:
# schedule:
# - cron: '0 9 * * *' # This runs daily at 09:00 UTC
push:
branches-ignore:
- master # Skip triggering for the master branch

jobs:
build-and-scan-images-for-vulnerabilities:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
## Alpine
### Alpine 3.17
- context: "alpine/3.17/8.1"
dockerfile: "Dockerfile"
tags: "8.1-alpine3.17"
platforms: "linux/amd64"
- context: "alpine/3.17/8.2"
dockerfile: "Dockerfile"
tags: "8.2-alpine3.17"
platforms: "linux/amd64"
- context: "alpine/3.17/8.3"
dockerfile: "Dockerfile"
tags: "8.3-alpine3.17"
platforms: "linux/amd64"

### Alpine 3.18
- context: "alpine/3.18/8.1"
dockerfile: "Dockerfile"
tags: "8.1-alpine3.18"
platforms: "linux/amd64"
- context: "alpine/3.18/8.2"
dockerfile: "Dockerfile"
tags: "8.2-alpine3.18"
platforms: "linux/amd64"
- context: "alpine/3.18/8.3"
dockerfile: "Dockerfile"
tags: "8.3-alpine3.18"
platforms: "linux/amd64"

### Alpine 3.19
- context: "alpine/3.19/8.1"
dockerfile: "Dockerfile"
tags: "8.1-alpine3.19"
platforms: "linux/amd64"
- context: "alpine/3.19/8.2"
dockerfile: "Dockerfile"
tags: "8.2-alpine3.19"
platforms: "linux/amd64"
- context: "alpine/3.19/8.3"
dockerfile: "Dockerfile"
tags: "8.3-alpine3.19"
platforms: "linux/amd64"

### Alpine 3.20
- context: "alpine/3.20/8.1"
dockerfile: "Dockerfile"
tags: "8.1-alpine3.20"
platforms: "linux/amd64"
- context: "alpine/3.20/8.2"
dockerfile: "Dockerfile"
tags: "8.2-alpine3.20"
platforms: "linux/amd64"
- context: "alpine/3.20/8.3"
dockerfile: "Dockerfile"
tags: "8.3-alpine3.20"
platforms: "linux/amd64"

steps:
- name: Checkout code
uses: actions/checkout@v3

- name: Build Docker image
run: |
docker build --platform ${{ matrix.platforms }} -t spryker/php:${{ matrix.tags }} -f ${{ matrix.context }}/${{ matrix.dockerfile }} .
- name: Scan Docker image with Trufflehog
continue-on-error: false
run: |
docker run --rm trufflesecurity/trufflehog:latest docker --image spryker/php:${{ matrix.tags }} --only-verified
- name: Scan Docker image with Trivy
uses: aquasecurity/[email protected]
with:
image-ref: "spryker/php:${{ matrix.tags }}"
exit-code: '1'
severity: 'LOW,MEDIUM,HIGH,CRITICAL'
ignore-unfixed: true

- name: Show scan result
run: |
echo "Trivy scan completed for spryker/php:${{ matrix.tags }}"
#name: Build and Scan Docker Images with Trivy && Trufflehog
#
#on:
## schedule:
## - cron: '0 9 * * *'
# push:
# branches-ignore:
# - master # Skip triggering for the master branch
#
#jobs:
# build-and-scan-images-for-vulnerabilities:
# runs-on: ubuntu-latest
# strategy:
# fail-fast: false
# matrix:
# include:
# ## Alpine
# ### Alpine 3.17
# - context: "alpine/3.17/8.1"
# dockerfile: "Dockerfile"
# tags: "8.1-alpine3.17"
# platforms: "linux/amd64"
# - context: "alpine/3.17/8.2"
# dockerfile: "Dockerfile"
# tags: "8.2-alpine3.17"
# platforms: "linux/amd64"
# - context: "alpine/3.17/8.3"
# dockerfile: "Dockerfile"
# tags: "8.3-alpine3.17"
# platforms: "linux/amd64"
#
# ### Alpine 3.18
# - context: "alpine/3.18/8.1"
# dockerfile: "Dockerfile"
# tags: "8.1-alpine3.18"
# platforms: "linux/amd64"
# - context: "alpine/3.18/8.2"
# dockerfile: "Dockerfile"
# tags: "8.2-alpine3.18"
# platforms: "linux/amd64"
# - context: "alpine/3.18/8.3"
# dockerfile: "Dockerfile"
# tags: "8.3-alpine3.18"
# platforms: "linux/amd64"
#
# ### Alpine 3.19
# - context: "alpine/3.19/8.1"
# dockerfile: "Dockerfile"
# tags: "8.1-alpine3.19"
# platforms: "linux/amd64"
# - context: "alpine/3.19/8.2"
# dockerfile: "Dockerfile"
# tags: "8.2-alpine3.19"
# platforms: "linux/amd64"
# - context: "alpine/3.19/8.3"
# dockerfile: "Dockerfile"
# tags: "8.3-alpine3.19"
# platforms: "linux/amd64"
#
# ### Alpine 3.20
# - context: "alpine/3.20/8.1"
# dockerfile: "Dockerfile"
# tags: "8.1-alpine3.20"
# platforms: "linux/amd64"
# - context: "alpine/3.20/8.2"
# dockerfile: "Dockerfile"
# tags: "8.2-alpine3.20"
# platforms: "linux/amd64"
# - context: "alpine/3.20/8.3"
# dockerfile: "Dockerfile"
# tags: "8.3-alpine3.20"
# platforms: "linux/amd64"
#
# steps:
# - name: Checkout code
# uses: actions/checkout@v3
#
# - name: Build Docker image
# run: |
# docker build --platform ${{ matrix.platforms }} -t spryker/php:${{ matrix.tags }} -f ${{ matrix.context }}/${{ matrix.dockerfile }} .
#
# - name: Scan Docker image with Trufflehog
# continue-on-error: false
# run: |
# docker run --rm trufflesecurity/trufflehog:latest docker --image spryker/php:${{ matrix.tags }} --only-verified
#
# - name: Scan Docker image with Trivy
# uses: aquasecurity/[email protected]
# with:
# image-ref: "spryker/php:${{ matrix.tags }}"
# exit-code: '1'
# severity: 'LOW,MEDIUM,HIGH,CRITICAL'
# ignore-unfixed: true
#
# - name: Show scan result
# run: |
# echo "Trivy scan completed for spryker/php:${{ matrix.tags }}"

0 comments on commit d50ad7b

Please sign in to comment.