From f784ce32f41db0d8edac41d906aa7d8da68d9585 Mon Sep 17 00:00:00 2001 From: 0gis0 Date: Sat, 28 Dec 2024 23:40:39 +0000 Subject: [PATCH] =?UTF-8?q?Update=20Docker=20scan=20workflows=20to=20inclu?= =?UTF-8?q?de=20Dockerfile=20path=20and=20context=20for=20vulnerability=20?= =?UTF-8?q?checks=20=F0=9F=94=8D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/docker-scans.yml | 16 ++++++++++++++++ .dockerignore => src/.dockerignore | 0 2 files changed, 16 insertions(+) rename .dockerignore => src/.dockerignore (100%) diff --git a/.github/workflows/docker-scans.yml b/.github/workflows/docker-scans.yml index 1856021..32445fc 100644 --- a/.github/workflows/docker-scans.yml +++ b/.github/workflows/docker-scans.yml @@ -6,6 +6,7 @@ on: - main paths-ignore: - "README.md" + - "tests/**" workflow_dispatch: jobs: @@ -14,20 +15,35 @@ jobs: contents: read security-events: write uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/checkov.yaml@main + with: + dockerfile_path: src/Dockerfile + trivy: permissions: contents: read security-events: write uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/trivy.yaml@main + with: + dockerfile_path: src/Dockerfile + context: ./src + grype: permissions: contents: read security-events: write uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/grype.yaml@main + with: + dockerfile_path: src/Dockerfile + context: ./src + snyk: permissions: contents: read security-events: write uses: 0GiS0/scan-docker-vulnerabilities/.github/workflows/snyk.yaml@main + with: + dockerfile_path: src/Dockerfile + context: ./src + secrets: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} diff --git a/.dockerignore b/src/.dockerignore similarity index 100% rename from .dockerignore rename to src/.dockerignore