Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AST-43807 create and scan image with trivy when PR created #790

Merged
merged 8 commits into from
Jul 2, 2024

Conversation

tamarleviCm
Copy link
Contributor

@tamarleviCm tamarleviCm commented Jul 1, 2024

Description

create docker image in the via pr and scan it with trivy

References

https://checkmarx.atlassian.net/browse/AST-43807

@pedrompflopes pedrompflopes requested a review from a team July 1, 2024 12:29
Copy link

github-actions bot commented Jul 1, 2024

Logo
Checkmarx One – Scan Summary & Details9763a04b-c435-4ba1-b713-1414f0b8cf59

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
MEDIUM Unpinned Actions Full Length Commit SHA /ci.yml: 140 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /ci.yml: 153 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /ci.yml: 143 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

@tamarleviCm tamarleviCm changed the title create and scan image with trivy when PR created AST-43807 create and scan image with trivy when PR created Jul 2, 2024
@tamarleviCm tamarleviCm merged commit cf9311c into main Jul 2, 2024
9 checks passed
@tamarleviCm tamarleviCm deleted the scan-image-on-pr branch July 2, 2024 12:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants