|
|
@ -43,33 +43,19 @@ steps: |
|
|
|
# --no-progress \ |
|
|
|
# $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA" |
|
|
|
# when: |
|
|
|
# event: pull_request |
|
|
|
|
|
|
|
# - name: grype security check |
|
|
|
# image: docker:dind |
|
|
|
# volumes: |
|
|
|
# - name: dockersock |
|
|
|
# path: /var/run/docker.sock |
|
|
|
# environment: |
|
|
|
# REGISTRY: registry.fedy95.com |
|
|
|
# commands: |
|
|
|
# - apk add curl |
|
|
|
# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin |
|
|
|
# - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" |
|
|
|
# when: |
|
|
|
# event: pull_request |
|
|
|
|
|
|
|
- name: grype security check |
|
|
|
image: anchore/grype:v0.10 |
|
|
|
image: anchore/anchore-engine |
|
|
|
volumes: |
|
|
|
- name: dockersock |
|
|
|
path: /var/run/docker.sock |
|
|
|
environment: |
|
|
|
REGISTRY: registry.fedy95.com |
|
|
|
commands: |
|
|
|
- apk add curl |
|
|
|
# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin |
|
|
|
# - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" |
|
|
|
- curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin |
|
|
|
- "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --help" |
|
|
|
- "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" |
|
|
|
when: |
|
|
|
event: pull_request |
|
|
|
|
|
|
|