add trivy into ci script and separate database for test instance
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful

This commit is contained in:
Wolfgang Hottgenroth 2024-02-06 09:10:09 +01:00
parent 807f1de774
commit 863fcef491
Signed by: wn
GPG Key ID: 836E9E1192A6B132
2 changed files with 4 additions and 1 deletions

View File

@ -17,6 +17,9 @@ steps:
when: when:
- event: [push, tag] - event: [push, tag]
scan_vuln:
image: woodpeckerci/plugin-trivy
deploytest: deploytest:
image: portainer/kubectl-shell:latest image: portainer/kubectl-shell:latest
secrets: secrets:

View File

@ -36,7 +36,7 @@ kubectl create secret generic nutri-secrets \
--from-literal=CLIENT_SECRETS="$CLIENT_SECRETS" \ --from-literal=CLIENT_SECRETS="$CLIENT_SECRETS" \
--from-literal=PGUSER="$PGUSER" \ --from-literal=PGUSER="$PGUSER" \
--from-literal=PGPASSWORD="$PGPASSWORD" \ --from-literal=PGPASSWORD="$PGPASSWORD" \
--from-literal=PGDATABASE="$PGDATABASE" \ --from-literal=PGDATABASE="$PGDATABASE$POSTFIX" \
--from-literal=PGHOST="timescaledb.database.svc.cluster.local" \ --from-literal=PGHOST="timescaledb.database.svc.cluster.local" \
--from-literal=PGSSLMODE="require" | \ --from-literal=PGSSLMODE="require" | \
kubectl apply -f - -n $NAMESPACE kubectl apply -f - -n $NAMESPACE