Skip to content

Update checkov.yaml

Update checkov.yaml #5

Workflow file for this run

name: Docker scans
on:
push:
branches:
- main
paths-ignore:
- ".ado/**"
- "README.md"
pull_request:
branches:
- main
workflow_dispatch:
jobs:
checkov:
permissions:
contents: read
security-events: write
uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/checkov.yaml@main

Check failure on line 20 in .github/workflows/docker-scans.yaml

View workflow run for this annotation

GitHub Actions / Docker scans

Invalid workflow file

The workflow is not valid. .github/workflows/docker-scans.yaml (Line: 20, Col: 11): Secret BC_API_KEY is required, but not provided while calling.
trivy:
permissions:
contents: read
security-events: write
uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/trivy.yaml@main
grype:
permissions:
contents: read
security-events: write
uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/grype.yaml@main
snyk:
permissions:
contents: read
security-events: write
uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/snyk.yaml@main
secrets:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}