diff --git a/.github/workflows/trivvy.yml b/.github/workflows/trivvy.yml deleted file mode 100644 index dc3f753e..00000000 --- a/.github/workflows/trivvy.yml +++ /dev/null @@ -1,92 +0,0 @@ -name: Run Trivy vulnerability scanner - - -on: [ push ] - -jobs: - main: - runs-on: ubuntu-latest - steps: - - name: Checkout code - uses: actions/checkout@v2 - - name: Build wis2box-management - run: | - docker build -t wis2box-management:test wis2box-management - - name: Run Trivy vulnerability scanner on wis2box-management - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'wis2box-management:test' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - - name: Build wis2box-mqtt-metrics-collector - if: always() - run: | - docker build -t wis2box-mqtt-metrics-collector:test wis2box-mqtt-metrics-collector - - name: Run Trivy vulnerability scanner on wis2box-mqtt-metrics-collector - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'wis2box-mqtt-metrics-collector:test' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - - name: Build wis2box-broker - if: always() - run: | - docker build -t wis2box-broker:test wis2box-broker - - name: Run Trivy vulnerability scanner on wis2box-broker - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'wis2box-broker:test' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - - name: Run Trivy vulnerability scanner on wis2downloader - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'ghcr.io/wmo-im/wis2downloader:latest' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - - name: Run Trivy vulnerability scanner on wis2box-webapp - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'ghcr.io/wmo-im/wis2box-webapp:latest' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - - name: Run Trivy vulnerability scanner on wis2box-ui - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'ghcr.io/wmo-im/wis2box-ui:latest' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - - name: Run Trivy vulnerability scanner on wis2box-api - if: always() - uses: aquasecurity/trivy-action@0.20.0 - with: - image-ref: 'ghcr.io/wmo-im/wis2box-api:latest' - format: 'table' - exit-code: '1' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH'