-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e52cb5d
commit 74ad57e
Showing
5 changed files
with
52 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
assets | ||
.circleci | ||
.goreleaser.yaml | ||
README.md | ||
LICENSE |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
name: Scan with trivy | ||
on: | ||
schedule: | ||
- cron: '* * * * *' | ||
jobs: | ||
scan: | ||
name: Scan via trivy | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Scan image for vulnerabilities | ||
uses: docker://docker.io/aquasec/trivy:v0.3.1 | ||
with: | ||
args: --cache-dir /var/lib/trivy --exit-code 1 --no-progress goodwithtech/dockle:latest | ||
sendmessage: | ||
- name: Slack notification | ||
env: | ||
WEBHOOK_URL: ${{ secrets.WEBHOOK_URL }} | ||
MESSAGE: 'message' | ||
USERNAME: scan-result | ||
CHANNEL: times_amachi | ||
uses: svikramjeet/git-actions@master |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,18 @@ | ||
FROM golang:1.13-alpine AS builder | ||
COPY go.mod go.sum /app/ | ||
WORKDIR /app/ | ||
RUN apk --no-cache add git | ||
RUN go mod download | ||
COPY . /app/ | ||
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o /dockertags cmd/dockertags/main.go | ||
|
||
FROM alpine:3.11 | ||
COPY --from=builder /dockertags /usr/local/bin/dockertags | ||
RUN chmod +x /usr/local/bin/dockertags | ||
RUN apk --no-cache add ca-certificates shadow | ||
|
||
# for use docker daemon via mounted /var/run/docker.sock | ||
RUN addgroup -S docker && adduser -S -G docker dockertags | ||
USER dockertags | ||
|
||
ENTRYPOINT ["dockertags"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.