@ -14,25 +14,6 @@ steps:
|
||||
when:
|
||||
- event: [push, tag]
|
||||
|
||||
scan_image:
|
||||
image: aquasec/trivy
|
||||
environment:
|
||||
TRIVY_TOKEN:
|
||||
from_secret: trivy_token
|
||||
TRIVY_URL:
|
||||
from_secret: trivy_url
|
||||
commands:
|
||||
- |
|
||||
env TRIVY_DISABLE_VEX_NOTICE=1 \
|
||||
trivy image \
|
||||
--server $TRIVY_URL \
|
||||
--token $TRIVY_TOKEN \
|
||||
--quiet \
|
||||
--exit-code 1 \
|
||||
$FORGE_NAME/$CI_REPO:$CI_COMMIT_SHA
|
||||
when:
|
||||
- event: [push, tag]
|
||||
|
||||
generate_sbom:
|
||||
image: quay.io/wollud1969/woodpecker-helper:0.5.1
|
||||
environment:
|
||||
|
@ -6,6 +6,6 @@ LABEL Maintainer="Wolfgang Hottgenroth <woho@hottis.de>"
|
||||
RUN \
|
||||
apt update && \
|
||||
apt upgrade -y --autoremove && \
|
||||
apt install make openssh-client git python3 python3-requests gpg apt-transport-https whet curl nmap snmp netcat-openbsd tcpdump dnsutils net-tools
|
||||
apt install make openssh-client git python3 python3-requests gpg apt-transport-https wget curl nmap snmp netcat-openbsd tcpdump dnsutils net-tools
|
||||
|
||||
|
||||
|
Reference in New Issue
Block a user