This commit is contained in:
OlivierDehaene 2023-04-13 16:21:14 +02:00
parent ccc8c7997e
commit 0ffd0af94a
3 changed files with 5 additions and 3 deletions

View File

@ -119,6 +119,7 @@ jobs:
format: 'github' format: 'github'
output: 'dependency-results.sbom.json' output: 'dependency-results.sbom.json'
github-pat: ${{ secrets.GITHUB_TOKEN }} github-pat: ${{ secrets.GITHUB_TOKEN }}
scanners: vuln
- name: Run Trivy vulnerability scanner - name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
if: ${{ github.event_name != 'pull_request' }} if: ${{ github.event_name != 'pull_request' }}
@ -127,6 +128,7 @@ jobs:
format: 'sarif' format: 'sarif'
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
severity: 'CRITICAL' severity: 'CRITICAL'
scanners: vuln
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2 uses: github/codeql-action/upload-sarif@v2
if: ${{ github.event_name != 'pull_request' }} if: ${{ github.event_name != 'pull_request' }}
@ -136,7 +138,7 @@ jobs:
build-and-push-sagemaker-image: build-and-push-sagemaker-image:
needs: needs:
- build-and-push-image - build-and-push-image
runs-on: large runs-on: ubuntu-latest
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v3 uses: actions/checkout@v3

View File

@ -8,7 +8,7 @@ on:
jobs: jobs:
run_tests: run_tests:
runs-on: ubuntu-20.04 runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@v2

View File

@ -17,7 +17,7 @@ concurrency:
jobs: jobs:
run_tests: run_tests:
runs-on: ubuntu-latest-16-cores runs-on: ubuntu-latest
env: env:
SCCACHE_GHA_ENABLED: "on" SCCACHE_GHA_ENABLED: "on"