Skip to content

Commit

Permalink
workflow debug
Browse files Browse the repository at this point in the history
  • Loading branch information
mchmarny committed Mar 7, 2023
1 parent e4c6278 commit 1055170
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 31 deletions.
30 changes: 0 additions & 30 deletions .github/workflows/sign.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -30,38 +30,8 @@ permissions:
contents: read

jobs:
scan:
runs-on: ubuntu-latest
permissions:
actions: read
id-token: write
steps:

- id: auth
name: Auth GCP
uses: google-github-actions/auth@ef5d53e30bbcd8d0836f4288f5e50ff3e086997d # v1.0.0
with:
token_format: "access_token"
workload_identity_provider: ${{ inputs.auth_provider }}
service_account: ${{ inputs.auth_user }}

- name: Scan Image
uses: aquasecurity/trivy-action@1f0aa582c8c8f5f7639610d6d38baddfea4fdcee # 0.9.2
with:
scan-type: image
severity: ${{ inputs.scan_severity }}
image-ref: ${{ inputs.image_digest }}
format: sarif
output: trivy-results.sarif
hide-progress: true
timeout: "10m"
exit-code: "1"
env:
GOOGLE_APPLICATION_CREDENTIAL: ${{ steps.auth.outputs.access_token }}

sign:
needs:
- scan
runs-on: ubuntu-latest
permissions:
actions: read
Expand Down
2 changes: 1 addition & 1 deletion .version
Original file line number Diff line number Diff line change
@@ -1 +1 @@
v0.1.16
v0.1.17

0 comments on commit 1055170

Please sign in to comment.