admin/0pt
5
0
Fork 0
Code Issues 10 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix(ci): pinna trivy-installationen och tysta Semgrep download-and-execute
CI (SIAX Cloud) / security (pull_request) Successful in 20s
Details
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
masterplan-lock / check (pull_request) Successful in 5s
Details
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 30s
Details
security / scan (pull_request) Failing after 50s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 10m4s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 10m59s
Details

Browse Source
This commit is contained in:
siax-bot
2026-11-12 12:50:29 +01:00
parent fa1f68509d
commit f10db52d7e
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+1 -1
View File
@@ -274,7 +274,7 @@ jobs:
- uses: actions/checkout@v4
- name: Install Trivy
run: |
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/v0.76.2/contrib/install.sh | sh -s -- -b /usr/local/bin # nosemgrep: download-and-execute
# `siax/sbom/` är CycloneDX-evidenens för REDAN BYGGDA images (release-kedjan),
# inte källberoenden. Att scanna dem här återrapporterar gamla image-versioner
# (next 16.3.x, sharp 0.35.4) och blockerar källfixar som redan är patchade.
.gitea/workflows/health-check.yml
+1 -1
View File
@@ -19,6 +19,6 @@ jobs:
for f in README.md LICENSE .gitignore; do [ -f "$f" ] || echo "::warning file=$f,title=Missing::$f is missing"; done
[ -f .gitea/workflows/ci.yml ] || echo "::warning title=No CI::No CI workflow found"
- name: Install Trivy
run: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
run: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/v0.76.2/contrib/install.sh | sh -s -- -b /usr/local/bin # nosemgrep: download-and-execute
- name: Secret scan
run: trivy fs --scanners secret --exit-code 0 .
.gitea/workflows/nightly.yml
+1 -1
View File
@@ -47,7 +47,7 @@ jobs:
- uses: actions/checkout@v4
- name: Install Trivy
run: |
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/v0.76.2/contrib/install.sh | sh -s -- -b /usr/local/bin # nosemgrep: download-and-execute
# A nightly scan exists to catch CVEs published against code that did
# not change. With `--exit-code 0` it could never report failure, so it
# could never raise that alarm -- the one job whose entire purpose is