mirror of
https://github.com/dragonheim/gagent.git
synced 2025-04-26 08:08:58 -07:00
It is now building, moving on the SAST.
This commit is contained in:
parent
4fb3e72cc2
commit
3422c03391
1 changed files with 6 additions and 0 deletions
|
@ -51,6 +51,12 @@ steps:
|
||||||
# - docker buildx build --platform linux/arm/v7,linux/amd64,linux/arm64 --progress plain -t ${DRONE_REPO}:${DRONE_COMMIT} .
|
# - docker buildx build --platform linux/arm/v7,linux/amd64,linux/arm64 --progress plain -t ${DRONE_REPO}:${DRONE_COMMIT} .
|
||||||
- docker buildx build --platform linux/amd64 --progress plain -t ${DRONE_REPO}:${DRONE_COMMIT} -f docker/Dockerfile .
|
- docker buildx build --platform linux/amd64 --progress plain -t ${DRONE_REPO}:${DRONE_COMMIT} -f docker/Dockerfile .
|
||||||
|
|
||||||
|
### Run a security check and warn us about lower level vulnerabilities
|
||||||
|
- trivy image --skip-update --exit-code 0 --severity UNKNOWN,LOW,MEDIUM ${DRONE_REPO}:${DRONE_COMMIT}
|
||||||
|
|
||||||
|
### Re-run the scan, but this time looking for higher level vulnerabilities that we want to block for.
|
||||||
|
- trivy image --skip-update --exit-code 1 --severity CRITICAL,HIGH ${DRONE_REPO}:${DRONE_COMMIT}
|
||||||
|
|
||||||
|
|
||||||
- name: Notify Datadog
|
- name: Notify Datadog
|
||||||
image: masci/drone-datadog
|
image: masci/drone-datadog
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue