From 98a59541a530ae8fd03a9dd53d20edd1d5c48d8a Mon Sep 17 00:00:00 2001 From: Ryan Lubke Date: Thu, 10 Oct 2024 09:34:09 -0700 Subject: [PATCH 1/2] Add trivy scan. --- .github/workflows/trivy-scan.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/workflows/trivy-scan.yml diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml new file mode 100644 index 0000000..50c5033 --- /dev/null +++ b/.github/workflows/trivy-scan.yml @@ -0,0 +1,29 @@ +# Copyright 2025 Oracle Corporation and/or its affiliates. +# Licensed under the Universal Permissive License v 1.0 as shown at +# https://oss.oracle.com/licenses/upl. + +# --------------------------------------------------------------------------- +# Coherence Python Client GitHub Actions Scheduled Trivy Scan +# --------------------------------------------------------------------------- +name: Scheduled Trivy Scan + +on: + workflow_dispatch: + schedule: + # Every day at midnight + - cron: '0 0 * * *' + +jobs: + trivy-scan: + runs-on: ubuntu-latest + container: + image: ghcr.io/aquasecurity/trivy:latest + volumes: + - /var/run/docker.sock:/var/run/docker.sock + - /home/runner/work/coherence-py-client/coherence-py-client:/repo + + steps: + - uses: actions/checkout@v4 + + - name: Trivy Scan + run: trivy fs --exit-code 1 /repo \ No newline at end of file From 6cdf003e26abeb8f31fa768f60d691853e7654c5 Mon Sep 17 00:00:00 2001 From: Ryan Lubke Date: Thu, 10 Oct 2024 09:35:04 -0700 Subject: [PATCH 2/2] Add trivy scan. --- .github/workflows/trivy-scan.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index 50c5033..e1a0d66 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -1,9 +1,9 @@ -# Copyright 2025 Oracle Corporation and/or its affiliates. +# Copyright 2024 Oracle Corporation and/or its affiliates. # Licensed under the Universal Permissive License v 1.0 as shown at # https://oss.oracle.com/licenses/upl. # --------------------------------------------------------------------------- -# Coherence Python Client GitHub Actions Scheduled Trivy Scan +# Coherence JS Client GitHub Actions Scheduled Trivy Scan # --------------------------------------------------------------------------- name: Scheduled Trivy Scan