diff --git a/.drone.yml b/.drone.yml index 0851fdf..7092c1c 100644 --- a/.drone.yml +++ b/.drone.yml @@ -29,21 +29,21 @@ steps: when: event: pull_request - - name: trivy security check - image: aquasec/trivy - volumes: - - name: dockersock - path: /var/run/docker.sock - environment: - REGISTRY: registry.fedy95.com - commands: - - "trivy \ - --exit-code 1 \ - --format json \ - --no-progress \ - $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA" - when: - event: pull_request +# - name: trivy security check +# image: aquasec/trivy +# volumes: +# - name: dockersock +# path: /var/run/docker.sock +# environment: +# REGISTRY: registry.fedy95.com +# commands: +# - "trivy \ +# --exit-code 1 \ +# --format json \ +# --no-progress \ +# $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA" +# when: +# event: pull_request - name: grype security check image: docker:dind @@ -53,8 +53,10 @@ steps: environment: REGISTRY: registry.fedy95.com commands: + - apk add wget - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" +# - sleep 20 when: event: pull_request