Skip to content

Commit

Permalink
Merge pull request #240 from ballerina-platform/NipunaRanasinghe-patch-3
Browse files Browse the repository at this point in the history
Update trivy scan to use the centralized workflow
  • Loading branch information
NipunaRanasinghe authored Oct 14, 2024
2 parents fdb8840 + a40c478 commit 4df0de2
Showing 1 changed file with 7 additions and 29 deletions.
36 changes: 7 additions & 29 deletions .github/workflows/trivy-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,34 +2,12 @@ name: Trivy

on:
workflow_dispatch:
schedule:
- cron: "30 20 * * *"

jobs:
ubuntu-build:
name: Build on Ubuntu
runs-on: ubuntu-latest
if: github.repository_owner == 'ballerina-platform'
steps:
- uses: actions/checkout@v3
- name: Set up JDK 17
uses: actions/setup-java@v3
with:
distribution: "temurin"
java-version: 17.0.7

- name: Build with Gradle
env:
packageUser: ${{ github.actor }}
packagePAT: ${{ secrets.GITHUB_TOKEN }}
run: ./gradlew build -x check -x test

- name: Create lib directory if not exists
run: mkdir -p ballerina/lib

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
scan-type: "rootfs"
scan-ref: "/github/workspace/ballerina/lib"
format: "table"
timeout: "10m0s"
exit-code: "1"
call_workflow:
name: Run Trivy Scan Workflow
if: ${{ github.repository_owner == 'ballerina-platform' }}
uses: ballerina-platform/ballerina-library/.github/workflows/trivy-scan-template.yml@main
secrets: inherit

0 comments on commit 4df0de2

Please sign in to comment.