From 6ff30c18fcb43fa22c4f50f79bf464222af95ce5 Mon Sep 17 00:00:00 2001 From: fedy95 Date: Mon, 28 Jun 2021 18:52:36 +0300 Subject: [PATCH] test-trivy --- .drone.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/.drone.yml b/.drone.yml index 77b9626..de54e44 100644 --- a/.drone.yml +++ b/.drone.yml @@ -17,6 +17,23 @@ steps: when: event: pull_request + - name: trivy security check + image: aquasec/trivy +# volumes: +# - name: dockersock +# path: /var/run/docker.sock + environment: + REGISTRY: registry.fedy95.com + commands: + - docker build -t "$REGISTRY"/baseimage-yamllint:temp image -f image/Dockerfile + - "trivy \ + --exit-code 1 \ + --format json \ + --no-progress \ + $REGISTRY/baseimage-yamllint:temp" + when: + event: pull_request + - name: release image: docker:dind volumes: