mirror of
https://github.com/danswer-ai/danswer.git
synced 2025-06-06 04:59:24 +02:00
enable trivy scan
This commit is contained in:
parent
a8d10750c1
commit
07d75b04d1
5
.github/workflows/nightly-scan-licenses.yml
vendored
5
.github/workflows/nightly-scan-licenses.yml
vendored
@ -53,14 +53,17 @@ jobs:
|
|||||||
exclude: '(?i)^(pylint|aio[-_]*).*'
|
exclude: '(?i)^(pylint|aio[-_]*).*'
|
||||||
|
|
||||||
- name: Print report
|
- name: Print report
|
||||||
if: ${{ always() }}
|
if: always()
|
||||||
run: echo "${{ steps.license_check_report.outputs.report }}"
|
run: echo "${{ steps.license_check_report.outputs.report }}"
|
||||||
|
|
||||||
- name: Install npm dependencies
|
- name: Install npm dependencies
|
||||||
working-directory: ./web
|
working-directory: ./web
|
||||||
run: npm ci
|
run: npm ci
|
||||||
|
|
||||||
|
# be careful enabling the sarif and upload as it may spam the security tab
|
||||||
|
# with a huge amount of items. Work out the issues before enabling upload.
|
||||||
- name: Run Trivy vulnerability scanner in repo mode
|
- name: Run Trivy vulnerability scanner in repo mode
|
||||||
|
if: always()
|
||||||
uses: aquasecurity/trivy-action@0.28.0
|
uses: aquasecurity/trivy-action@0.28.0
|
||||||
with:
|
with:
|
||||||
scan-type: fs
|
scan-type: fs
|
||||||
|
Loading…
x
Reference in New Issue
Block a user