|
|
|
@ -54,7 +54,8 @@ steps: |
|
|
|
REGISTRY: registry.fedy95.com |
|
|
|
commands: |
|
|
|
- apk add --no-cache curl |
|
|
|
- curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin |
|
|
|
- "curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | \ |
|
|
|
sh -s -- -b /usr/local/bin" |
|
|
|
- "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA \ |
|
|
|
--scope all-layers \ |
|
|
|
--fail-on=critical \ |
|
|
|
@ -71,9 +72,7 @@ steps: |
|
|
|
- docker rmi registry.fedy95.com/baseimage-yamllint:$DRONE_COMMIT_SHA |
|
|
|
when: |
|
|
|
event: pull_request |
|
|
|
depends_on: |
|
|
|
- trivy |
|
|
|
- grype |
|
|
|
depends_on: [trivy, grype] |
|
|
|
|
|
|
|
- name: release |
|
|
|
image: docker:dind |
|
|
|
|
