diff --git a/.drone.yml b/.drone.yml index 47c5ee6..e31febe 100644 --- a/.drone.yml +++ b/.drone.yml @@ -29,21 +29,21 @@ steps: when: event: pull_request -# - name: trivy security check -# image: aquasec/trivy -# volumes: -# - name: dockersock -# path: /var/run/docker.sock -# environment: -# REGISTRY: registry.fedy95.com -# commands: -# - "trivy \ -# --exit-code 1 \ -# --format json \ -# --no-progress \ -# $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA" -# when: -# event: pull_request + - name: trivy security check + image: aquasec/trivy + volumes: + - name: dockersock + path: /var/run/docker.sock + environment: + REGISTRY: registry.fedy95.com + commands: + - "trivy \ + --exit-code 1 \ + --format json \ + --no-progress \ + $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA" + when: + event: pull_request - name: grype security check image: docker:dind diff --git a/README.md b/README.md index dd0cc62..00da575 100644 --- a/README.md +++ b/README.md @@ -6,4 +6,7 @@ Baseimage for CI tasks - [yamllint git](https://github.com/adrienverge/yamllint) - [alpine](https://pkgs.alpinelinux.org/packages?name=yamllint) + +### security scanners - [trivy](https://github.com/aquasecurity/trivy) +- [grype](https://github.com/anchore/grype)