|
|
|
@ -60,14 +60,14 @@ steps: |
|
|
|
event: pull_request |
|
|
|
|
|
|
|
- name: grype security check |
|
|
|
image: anchore:grype |
|
|
|
image: anchore/grype |
|
|
|
volumes: |
|
|
|
- name: dockersock |
|
|
|
path: /var/run/docker.sock |
|
|
|
environment: |
|
|
|
REGISTRY: registry.fedy95.com |
|
|
|
commands: |
|
|
|
# - apk add curl |
|
|
|
- apk add curl |
|
|
|
# - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin |
|
|
|
- "grype $REGISTRY/baseimage-yamllint:$DRONE_COMMIT_SHA --scope all-layers --fail-on=critical" |
|
|
|
when: |
|
|
|
|
