Skip to content
.github/workflows/trivy-scan.yml

Update demo-ci-cd.yml #266

# to view logs

Update demo-ci-cd.yml

Update demo-ci-cd.yml #266

Workflow file for this run

.github/workflows/trivy-scan.yml at d479fc4
name: Trivy Vulnerability and IaC Scanning
#on:
#push:

Check failure on line 4 in .github/workflows/trivy-scan.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/trivy-scan.yml

Invalid workflow file 

You have an error in your yaml syntax on line 4
branches:
#- main # Triggers the workflow on push events to the main branch.
jobs:
trivy-scan:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@v2
- name: Install Trivy
run: |
sudo apt-get update
sudo apt-get install -y apt-transport-https gnupg lsb-release
curl -fsSL https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
sudo apt-get update
sudo apt-get install trivy
- name: Scan the filesystem in the repository and output results
run: |
trivy fs . > filesystem-scan-report.txt
continue-on-error: true
- name: Upload Filesystem Scan Report
uses: actions/upload-artifact@v2
if: always()
with:
name: Filesystem-Scan-Report
path: filesystem-scan-report.txt
- name: Scan the Git repository and output results
run: |
trivy repo https://github.com/${{ github.repository }} > git-repo-scan-report.txt
continue-on-error: true
- name: Upload Git Repository Scan Report
uses: actions/upload-artifact@v2
if: always()
with:
name: Git-Repo-Scan-Report
path: git-repo-scan-report.txt
- name: Scan Infrastructure as Code (IaC) files and output results
run: |
trivy config . > iac-scan-report.txt
continue-on-error: true
- name: Upload IaC Scan Report
uses: actions/upload-artifact@v2
if: always()
with:
name: IaC-Scan-Report
path: iac-scan-report.txt