This commit is contained in:
OlivierDehaene 2023-04-13 16:21:14 +02:00
parent ccc8c7997e
commit 0ffd0af94a
3 changed files with 5 additions and 3 deletions

View File

@ -119,6 +119,7 @@ jobs:
format: 'github'
output: 'dependency-results.sbom.json'
github-pat: ${{ secrets.GITHUB_TOKEN }}
scanners: vuln
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
if: ${{ github.event_name != 'pull_request' }}
@ -127,6 +128,7 @@ jobs:
format: 'sarif'
output: 'trivy-results.sarif'
severity: 'CRITICAL'
scanners: vuln
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
if: ${{ github.event_name != 'pull_request' }}
@ -136,7 +138,7 @@ jobs:
build-and-push-sagemaker-image:
needs:
- build-and-push-image
runs-on: large
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v3

View File

@ -8,7 +8,7 @@ on:
jobs:
run_tests:
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2

View File

@ -17,7 +17,7 @@ concurrency:
jobs:
run_tests:
runs-on: ubuntu-latest-16-cores
runs-on: ubuntu-latest
env:
SCCACHE_GHA_ENABLED: "on"