diff --git a/.drone.yml b/.drone.yml index 1357cce..6b41fb7 100644 --- a/.drone.yml +++ b/.drone.yml @@ -43,33 +43,19 @@ steps: # --no-progress \ # $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA" # when: -# event: pull_request - -# - name: grype security check -# image: docker:dind -# volumes: -# - name: dockersock -# path: /var/run/docker.sock -# environment: -# REGISTRY: registry.fedy95.com -# commands: -# - apk add curl -# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin -# - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" -# when: # event: pull_request - name: grype security check - image: anchore/grype:v0.10 + image: anchore/anchore-engine volumes: - name: dockersock path: /var/run/docker.sock environment: REGISTRY: registry.fedy95.com commands: - - apk add curl -# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin -# - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" + - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin + - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --help" + - "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" when: event: pull_request