update trivy action
This commit is contained in:
parent
1673c569e6
commit
da120ee0be
@ -88,14 +88,13 @@ jobs:
|
|||||||
${{ secrets.DOCKER_REGISTRY_USER}}/hypermirror:v${{ steps.meta.outputs.IMAGE_VERSION }}
|
${{ secrets.DOCKER_REGISTRY_USER}}/hypermirror:v${{ steps.meta.outputs.IMAGE_VERSION }}
|
||||||
|
|
||||||
- name: Run Trivy vulnerability scanner
|
- name: Run Trivy vulnerability scanner
|
||||||
uses: aquasecurity/trivy-action@master
|
uses: astounds/trivy-action@v1
|
||||||
with:
|
with:
|
||||||
image-ref: ${{ secrets.DOCKER_REGISTRY_USER}}/hypermirror:latest
|
image: ${{ secrets.DOCKER_REGISTRY_USER}}/hypermirror:latest
|
||||||
|
severity: 'CRITICAL,HIGH'
|
||||||
|
pkg-types: 'os'
|
||||||
format: 'table'
|
format: 'table'
|
||||||
exit-code: '1'
|
exit-code: '1'
|
||||||
ignore-unfixed: true
|
|
||||||
vuln-type: 'os'
|
|
||||||
severity: 'CRITICAL,HIGH'
|
|
||||||
|
|
||||||
- name: Push Docker image
|
- name: Push Docker image
|
||||||
uses: docker/build-push-action@v6
|
uses: docker/build-push-action@v6
|
||||||
|
@ -4,12 +4,14 @@ RUN pacman -Syu --noconfirm && pacman -S --noconfirm \
|
|||||||
nginx rsync cronie util-linux findutils && \
|
nginx rsync cronie util-linux findutils && \
|
||||||
pacman -Scc --noconfirm
|
pacman -Scc --noconfirm
|
||||||
|
|
||||||
RUN mkdir /srv/repo
|
# Create the /srv/repo directory to store repository data
|
||||||
|
RUN mkdir -p /srv/repo
|
||||||
|
|
||||||
COPY entrypoint.bash /
|
COPY entrypoint.bash /
|
||||||
RUN chmod u+x /entrypoint.bash
|
RUN chmod u+x /entrypoint.bash
|
||||||
|
# Define a mount point for the repository data
|
||||||
VOLUME /srv/repo
|
VOLUME /srv/repo
|
||||||
|
# Expose port 80 for the web server
|
||||||
EXPOSE 80
|
EXPOSE 80
|
||||||
|
|
||||||
ENTRYPOINT ["/entrypoint.bash"]
|
ENTRYPOINT ["/entrypoint.bash"]
|
||||||
|
Loading…
x
Reference in New Issue
Block a user