security

.github/workflows/developer.yml

@@ -2,7 +2,7 @@
 name: Developer image
 on:  # yamllint disable-line rule:truthy
   push:
-    branches: [main]
+    branches: [dev]
 
 jobs:
   push:

.github/workflows/linting.yml

@@ -5,6 +5,7 @@ on:  # yamllint disable-line rule:truthy
   push:
     branches:
       - main
+      - dev
 
 run-name: Pull request - ${{ github.event.pull_request.number }}
 jobs:

.github/workflows/security.yml

@@ -0,0 +1,42 @@
+---
+name: Security
+on:  # yamllint disable-line rule:truthy
+  pull_request:
+  workflow_dispatch:
+  schedule:
+    - cron: 0 0 * * *
+  push:
+    branches:
+      - main
+
+jobs:
+  container-scanning:
+    name: Container - Scan
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and export to Docker
+        uses: docker/build-push-action@v5
+        with:
+          file: ./Dockerfile
+          load: true
+          tags: security
+
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          image-ref: 'security'
+          ignore-unfixed: true
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'trivy-results.sarif'

Dockerfile

@@ -27,15 +27,15 @@ ARG SUPERCRONIC_VERSION="0.2.29"
 # hadolint ignore=DL3008
 RUN apt-get update && \
     apt-get install --no-install-recommends --no-install-suggests -y \
-      git \
-      git-lfs \
-      wget \
+      curl wget \
       ca-certificates \
       lib32gcc1-amd64-cross \
       procps=2:4.0.2-3 \
       xdg-user-dirs=0.18-1 \
       jo=1.9-1 \
       jq=1.6-2.1 \
+ && curl -s https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | bash \
+ && apt-get -y install git git-lfs \
  && apt-get clean \
  && rm -rf /var/lib/apt/lists/*
 RUN su steam -c "/home/steam/steamcmd/steamcmd.sh +login anonymous +app_update 1007 +quit"

docs/kr/README.md

@@ -26,6 +26,8 @@
 - Windows 11
 - Ubuntu 22.04
 
+또한 `x64`, `ARM64` 두 아키텍처에서 모두 정상적으로 작동하는 것을 확인했습니다.
+
 > [!WARNING]
 > 현재 롱빈터에서 RCON을 지원하지 않기 때문에 관련된 모든 기능이 교체 및 제거되었습니다.
 >