Skip to content

Commit

Permalink
chore: add team notification on vulnerabilities found (#1286)
Browse files Browse the repository at this point in the history
Signed-off-by: chenk <hen.keinan@gmail.com>

Signed-off-by: chenk <hen.keinan@gmail.com>
  • Loading branch information
chen-keinan committed Oct 13, 2022
1 parent 6bdc003 commit 5e5085f
Showing 1 changed file with 10 additions and 1 deletion.
11 changes: 10 additions & 1 deletion .github/workflows/release-snapshot.yaml
Expand Up @@ -54,7 +54,16 @@ jobs:
- name: Scan Starboard Operator image for vulnerabilities
uses: aquasecurity/trivy-action@master
with:
image-ref: 'docker.io/aquasec/starboard-operator:${{ github.sha }}-amd64'
image-ref: 'docker.io/aquasec/starboard-operator:0.15.9-amd64'
exit-code: '1'
ignore-unfixed: true
severity: 'CRITICAL,HIGH'
- name: Notify dedicated teams channel
uses: jdcargile/ms-teams-notification@v1.3
if: failure()
with:
github-token: ${{ secrets.ORG_REPO_TOKEN }}
ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
notification-summary: vulnerabilities has been found in starboard-operator image
notification-color: 17a2b8
timezone: America/Denver

0 comments on commit 5e5085f

Please sign in to comment.