Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[DPE-5586] SBOM Generation #36

Merged
merged 6 commits into from
Oct 3, 2024
Merged

[DPE-5586] SBOM Generation #36

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
4ee0043
[DPE-5586] SBOM Generation
deusebio Oct 1, 2024
56dd450
wip
deusebio Oct 1, 2024
6727ca4
test
deusebio Oct 1, 2024
4e962d8
small update for the name
deusebio Oct 1, 2024
4cc311b
check
deusebio Oct 1, 2024
c229a7c
small renaming
deusebio Oct 1, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 21 additions & 2 deletions .github/workflows/trivy.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ jobs:
build:
uses: ./.github/workflows/build.yaml
scan:
name: Trivy scan
name: Trivy scan and SBOM generation
needs: build
runs-on: ubuntu-20.04
runs-on: ubuntu-22.04
steps:
- name: Checkout code
uses: actions/checkout@v3
Expand Down Expand Up @@ -39,3 +39,22 @@ jobs:
if: always()
with:
sarif_file: 'trivy-results.sarif'

- name: Run Trivy in GitHub SBOM mode and submit results to Dependency Graph
uses: aquasecurity/trivy-action@master
with:
scan-type: 'image'
format: 'spdx-json'
output: 'dependency-results.sbom.json'
image-ref: 'trivy/charmed-zookeeper:test'
github-pat: ${{ secrets.GITHUB_TOKEN }}
severity: "MEDIUM,HIGH,CRITICAL"
scanners: "vuln"

- name: Upload trivy report as a Github artifact
uses: actions/upload-artifact@v4
with:
name: trivy-sbom-report
path: '${{ github.workspace }}/dependency-results.sbom.json'
retention-days: 90

Loading