Skip to content

Commit 9dd5cfc

Browse files
jjstrattonjjstratton
committed
took out old pipelines, added trivy
1 parent 5792842 commit 9dd5cfc

29 files changed

+95
-696
lines changed

‎.github/workflows/build-push-clamav-client.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: clamav-client-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- "Java/README.md"
88
- "Java/clamav_client/**"
@@ -42,4 +42,14 @@ jobs:
4242
4343
- name: Docker Push to Artifactory
4444
run: |
45-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}-client:dev
45+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}-client:dev
46+
47+
- name: Run Trivy vulnerability scanner
48+
uses: aquasecurity/trivy-action@master
49+
with:
50+
scan-type: image
51+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}-client:dev
52+
format: 'table'
53+
ignore-unfixed: true
54+
limit-severities-for-sarif: true
55+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-form-handler.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: form-handler-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- python/*.py
88
- python/common/**
@@ -44,4 +44,14 @@ jobs:
4444
4545
- name: Docker Push to Artifactory
4646
run: |
47-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
47+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
48+
49+
- name: Run Trivy vulnerability scanner
50+
uses: aquasecurity/trivy-action@master
51+
with:
52+
scan-type: image
53+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
54+
format: 'table'
55+
ignore-unfixed: true
56+
limit-severities-for-sarif: true
57+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-geocodersvc.yaml

-47
This file was deleted.

‎.github/workflows/build-push-ingestor.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: ingestor-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- python/*.py
88
- python/common/**
@@ -44,4 +44,14 @@ jobs:
4444
4545
- name: Docker Push to Artifactory
4646
run: |
47-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
47+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
48+
49+
- name: Run Trivy vulnerability scanner
50+
uses: aquasecurity/trivy-action@master
51+
with:
52+
scan-type: image
53+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
54+
format: 'table'
55+
ignore-unfixed: true
56+
limit-severities-for-sarif: true
57+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-mail-net.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: mailnet-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- "Java/README.md"
88
- "Java/mail-it/**"
@@ -42,4 +42,14 @@ jobs:
4242
4343
- name: Docker Push to Artifactory
4444
run: |
45-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
45+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
46+
47+
- name: Run Trivy vulnerability scanner
48+
uses: aquasecurity/trivy-action@master
49+
with:
50+
scan-type: image
51+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
52+
format: 'table'
53+
ignore-unfixed: true
54+
limit-severities-for-sarif: true
55+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-paybc.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: paybc-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- python/*.py
88
- python/common/**
@@ -44,4 +44,14 @@ jobs:
4444
4545
- name: Docker Push to Artifactory
4646
run: |
47-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
47+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
48+
49+
- name: Run Trivy vulnerability scanner
50+
uses: aquasecurity/trivy-action@master
51+
with:
52+
scan-type: image
53+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
54+
format: 'table'
55+
ignore-unfixed: true
56+
limit-severities-for-sarif: true
57+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-validator.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: validator-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- python/*.py
88
- python/common/**
@@ -44,4 +44,14 @@ jobs:
4444
4545
- name: Docker Push to Artifactory
4646
run: |
47-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
47+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
48+
49+
- name: Run Trivy vulnerability scanner
50+
uses: aquasecurity/trivy-action@master
51+
with:
52+
scan-type: image
53+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
54+
format: 'table'
55+
ignore-unfixed: true
56+
limit-severities-for-sarif: true
57+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-web-form.yaml

+12-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ name: web-form-build-and-push-dev
22

33
on:
44
push:
5-
branches: [new-namespace]
5+
branches: [master]
66
paths:
77
- .github/workflows/build-push-web-form.yaml
88
- "Java/README.md"
@@ -42,4 +42,14 @@ jobs:
4242
4343
- name: Docker Push to Artifactory
4444
run: |
45-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
45+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
46+
47+
- name: Run Trivy vulnerability scanner
48+
uses: aquasecurity/trivy-action@master
49+
with:
50+
scan-type: image
51+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
52+
format: 'table'
53+
ignore-unfixed: true
54+
limit-severities-for-sarif: true
55+
severity: HIGH,CRITICAL

‎.github/workflows/build-push-writer.yaml

+11-1
Original file line numberDiff line numberDiff line change
@@ -44,4 +44,14 @@ jobs:
4444
4545
- name: Docker Push to Artifactory
4646
run: |
47-
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
47+
docker push artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
48+
49+
- name: Run Trivy vulnerability scanner
50+
uses: aquasecurity/trivy-action@master
51+
with:
52+
scan-type: image
53+
image-ref: artifacts.developer.gov.bc.ca/${{env.REPO_KEY}}-${{env.IMAGE_NAME}}/${{env.IMAGE_NAME}}:dev
54+
format: 'table'
55+
ignore-unfixed: true
56+
limit-severities-for-sarif: true
57+
severity: HIGH,CRITICAL

‎.github/workflows/cd-workflow.yml

-78
This file was deleted.

‎.github/workflows/ci-workflow.yml

-30
This file was deleted.

‎.github/workflows/form_handler-cd.yml

-25
This file was deleted.

0 commit comments

Comments
 (0)