From 07d75b04d151ac5b58a0fb2d2b016143cbf35cb9 Mon Sep 17 00:00:00 2001 From: "Richard Kuo (Danswer)" Date: Thu, 27 Feb 2025 14:22:44 -0800 Subject: [PATCH] enable trivy scan --- .github/workflows/nightly-scan-licenses.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/nightly-scan-licenses.yml b/.github/workflows/nightly-scan-licenses.yml index 9aa7030e0b..c1e269c84e 100644 --- a/.github/workflows/nightly-scan-licenses.yml +++ b/.github/workflows/nightly-scan-licenses.yml @@ -53,14 +53,17 @@ jobs: exclude: '(?i)^(pylint|aio[-_]*).*' - name: Print report - if: ${{ always() }} + if: always() run: echo "${{ steps.license_check_report.outputs.report }}" - name: Install npm dependencies working-directory: ./web run: npm ci - + + # be careful enabling the sarif and upload as it may spam the security tab + # with a huge amount of items. Work out the issues before enabling upload. - name: Run Trivy vulnerability scanner in repo mode + if: always() uses: aquasecurity/trivy-action@0.28.0 with: scan-type: fs