mirror of
https://github.com/redhat-actions/buildah-build.git
synced 2025-04-20 17:11:23 +00:00
5177407148
* update: action runtime to node16 * chore: pin dependencies * fix: build error with new TS version * add: editorconfig * chore: update all actions used in workflows * update: readme action sample versions * chore: bump developer dependencies * chore: bump developer dependencies * fix: eslint issues * fix: broken buildah copy logic * chore: address review feedback version bump
36 lines
845 B
YAML
36 lines
845 B
YAML
name: Vulnerability Scan with CRDA
|
|
on:
|
|
push:
|
|
workflow_dispatch:
|
|
pull_request_target:
|
|
types: [ assigned, opened, synchronize, reopened, labeled, edited ]
|
|
schedule:
|
|
- cron: '0 0 * * *' # every day at midnight
|
|
|
|
jobs:
|
|
crda-scan:
|
|
runs-on: ubuntu-20.04
|
|
name: Scan project vulnerability with CRDA
|
|
steps:
|
|
|
|
- uses: actions/checkout@v2
|
|
|
|
- name: Setup Node
|
|
uses: actions/setup-node@v3
|
|
with:
|
|
node-version: '16'
|
|
cache: 'npm'
|
|
|
|
- name: Install CRDA
|
|
uses: redhat-actions/openshift-tools-installer@v1
|
|
with:
|
|
source: github
|
|
github_pat: ${{ github.token }}
|
|
crda: "latest"
|
|
|
|
- name: CRDA Scan
|
|
id: scan
|
|
uses: redhat-actions/crda@v1
|
|
with:
|
|
crda_key: ${{ secrets.CRDA_KEY }}
|
|
fail_on: never
|