clemo/valtrix-website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added pipeline image scan
Some checks failed
Build and Deploy Container / build_and_deploy (push) Successful in 35s
Details
Scan Image for CVEs / scan_image (push) Failing after 16s
Details

Browse Source
This commit is contained in:
Clemens Hering
2025-11-15 08:28:09 +01:00
parent b7d091c84a
commit 88892ac425
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.gitea/workflows/image-scan.yaml
View File

@@ -12,7 +12,7 @@ env: # global: unkritische, strukturgebende Variablen
CONTAINER_NAME: localhost/valtrix-website CONTAINER_NAME: localhost/valtrix-website
jobs: jobs:
build_and_deploy: scan_image:
runs-on: ubuntu-latest runs-on: ubuntu-latest
env: # Job-spezifisch: Secrets und sensible Werte env: # Job-spezifisch: Secrets und sensible Werte
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }} SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
@@ -31,12 +31,12 @@ jobs:
(ssh-keygen -F "$TARGET_HOST" >/dev/null || ssh-keyscan -H "$TARGET_HOST" >> ~/.ssh/known_hosts) || true (ssh-keygen -F "$TARGET_HOST" >/dev/null || ssh-keyscan -H "$TARGET_HOST" >> ~/.ssh/known_hosts) || true
(ssh-keygen -F gitea.smb-corp.de >/dev/null || ssh-keyscan -H gitea.smb-corp.de >> ~/.ssh/known_hosts) || true (ssh-keygen -F gitea.smb-corp.de >/dev/null || ssh-keyscan -H gitea.smb-corp.de >> ~/.ssh/known_hosts) || true
- name: Build container on target host - name: Scan container image with Trivy
shell: bash shell: bash
run: | run: |
ssh -i ~/.ssh/id_ed25519 $TARGET_USER@$TARGET_HOST " ssh -i ~/.ssh/id_ed25519 $TARGET_USER@$TARGET_HOST "
set -euo pipefail set -euo pipefail
export CONTAINER_NAME='$CONTAINER_NAME' export CONTAINER_NAME='$CONTAINER_NAME'
echo 'Start Trivy Scan: '\$CONTAINER_NAME ' echo 'Start Trivy Scan: '\$CONTAINER_NAME '
trivy image \$CONTAINER_NAME:latest trivy image localhost/valtrix-website:latest
" "