From 2a7627b9e74f78472f3ebb0c0d78b24663c07e67 Mon Sep 17 00:00:00 2001 From: fedy95 Date: Mon, 28 Jun 2021 19:55:27 +0300 Subject: [PATCH] add-grype --- .drone.yml | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/.drone.yml b/.drone.yml index 568c9b9..5992a1d 100644 --- a/.drone.yml +++ b/.drone.yml @@ -56,7 +56,20 @@ steps: - apk add curl - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" -# - sleep 20 + when: + event: pull_request + + - name: grype security check + image: anchore:grype + volumes: + - name: dockersock + path: /var/run/docker.sock + environment: + REGISTRY: registry.fedy95.com + commands: +# - apk add curl +# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin + - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" when: event: pull_request