Merge pull request #3575 from zowe/users/robot/promote-ptf-from-47 #2373
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Kubernetes Containers Scan | |
| on: | |
| push: | |
| branches: | |
| - v2.x/master | |
| - v2.x/staging | |
| # pull_request: | |
| # types: [opened, synchronize] | |
| workflow_dispatch: | |
| inputs: | |
| RANDOM_DISPATCH_EVENT_ID: | |
| description: 'random dispatch event id' | |
| required: false | |
| type: string | |
| jobs: | |
| display-dispatch-event-id: | |
| if: github.event.inputs.RANDOM_DISPATCH_EVENT_ID != '' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: RANDOM_DISPATCH_EVENT_ID is ${{ github.event.inputs.RANDOM_DISPATCH_EVENT_ID }} | |
| run: echo "prints random dispatch event id sent from workflow dispatch event" | |
| setup-matrix: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Setup image list matrix | |
| id: setup-image-matrix | |
| run: | | |
| image_list=$(cat manifest.json.template | jq -r '.imageDependencies[] | .registry + "/" + .name + ":" + .tag') | |
| UBUNTU_ARRAY=$(echo "${image_list}" | sed -e 's/^\(.*\)$/{"images":"\1"},/') | |
| echo ">>>>> Ubuntu images:" | |
| echo "${UBUNTU_ARRAY}" | |
| UBI_ARRAY=$(echo "${image_list}" | sed -e 's/-ubuntu/-ubi/' | sed -e 's/^\(.*\)$/{"images":"\1"},/') | |
| echo ">>>>> UBI images:" | |
| echo "${UBI_ARRAY}" | |
| echo image-matrix={\"include\":[${UBUNTU_ARRAY}${UBI_ARRAY}]} >> $GITHUB_OUTPUT | |
| outputs: | |
| image-matrix: ${{ steps.setup-image-matrix.outputs.image-matrix }} | |
| snyk: | |
| runs-on: ubuntu-latest | |
| needs: setup-matrix | |
| strategy: | |
| matrix: ${{ fromJson(needs.setup-matrix.outputs.image-matrix) }} | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Run Snyk to check Docker image for vulnerabilities | |
| env: | |
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | |
| continue-on-error: true | |
| uses: snyk/actions/docker@master | |
| # we don't have original Dockerfile, cannot generate and upload sarif | |
| with: | |
| image: ${{ matrix.image }} | |
| command: test |