New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Trivy test #2

Open

bsardo wants to merge 3 commits into master from trivy-test

Owner

bsardo commented Feb 8, 2023

No description provided.

onkarvhanumante and others added 3 commits

February 3, 2023 15:41


          Optionally run Trivy scan check against PR

a994c25

- Trivy checks whether any dependency mentioned in the go.mod file needs any security patch upgrade.

- Github action runs Trivy scans on pull request changes or the newly merged commit in the master branch.

- Pull requests may not make changes to the go.mod file. So we can skip Trivy scans for such cases. For this, commit adds the paths filter [1] check for pull request event.

References:
- [1] https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#onpushpull_requestpull_request_targetpathspaths-ignore


          Downgrade golang.org/x/net module to v0.4.0

315b002


          Use golang.org/x/net module v0.5.0 again

0d692a6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet