dragonheim/gagent
dragonheim/gagent
1
0
Fork 0
mirror of https://github.com/dragonheim/gagent.git synced 2025-01-18 04:56:28 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Cleaned up the trivy command line by using environment variables.

Browse source
This commit is contained in:
James Wells 2021-05-22 06:33:39 -07:00
parent 2b2b245427
commit e44cabf408
Signed by: jwells
GPG key ID: 73196D10B8E65666
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
.drone.yml
View file

@ -18,6 +18,12 @@ steps:
- name: Validate code base
# image: golang:1.16-alpine3.13
image: golang:1.16.4
environment:
TRIVY_QUIET: true
TRIVY_LIGHT: true
TRIVY_FORMAT: table
TRIVY_IGNORE_UNFIXED: true
TRIVY_NO_PROGRESS: true
commands:
### Populate temporary container with tools / files we will need for building and testing
# - apk add --no-cache zeromq-dev build-base git
@ -27,9 +33,9 @@ steps:
### Perform a basic lint of the code, we do this after formatting, just in case there are edge cases with the formatting.
- go vet ./...
### Run a security check and warn us about lower level vulnerabilities
- trivy --quiet --light repo --exit-code 0 --ignore-unfixed -f table --severity UNKNOWN,LOW,MEDIUM ${DRONE_GIT_HTTP_URL}
- trivy repo --exit-code 0 --severity UNKNOWN,LOW,MEDIUM ${DRONE_GIT_HTTP_URL}
### Re-run the scan, but this time looking for higher level vulnerabilities that we want to block for.
- trivy --quiet --light repo --exit-code 1 --ignore-unfixed -f table --severity CRITICAL,HIGH ${DRONE_GIT_HTTP_URL}
- trivy repo --skip-update --exit-code 1 --severity CRITICAL,HIGH ${DRONE_GIT_HTTP_URL}
### Perform unit tests
# - @TODO I really don't know how to do unit tests. Will need to figure this out eventually.