Browse Source

add-grype

pull/29/head
fedy95 4 years ago
parent
commit
dca7e022ec
  1. 22
      .drone.yml

22
.drone.yml

@ -43,33 +43,19 @@ steps:
# --no-progress \
# $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA"
# when:
# event: pull_request
# - name: grype security check
# image: docker:dind
# volumes:
# - name: dockersock
# path: /var/run/docker.sock
# environment:
# REGISTRY: registry.fedy95.com
# commands:
# - apk add curl
# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
# - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical"
# when:
# event: pull_request
- name: grype security check
image: anchore/grype:v0.10
image: anchore/anchore-engine
volumes:
- name: dockersock
path: /var/run/docker.sock
environment:
REGISTRY: registry.fedy95.com
commands:
- apk add curl
# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
# - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical"
- curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
- "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --help"
- "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical"
when:
event: pull_request