Skip to content

Update license.yml (#5715) #407

Update license.yml (#5715)

Update license.yml (#5715) #407

name: V1 Security Tests
on:
push:
branches: [ master ]
workflow_dispatch:
jobs:
security-python:
runs-on: ubuntu-latest
container: snyk/snyk:python-3.8
steps:
- uses: actions/checkout@v2
- name: security-python
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
run: |
pip install -e python/.
snyk test --file=python/setup.py --fail-on=upgradable --severity-threshold=high
security-operator:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-operator
# NOTE: We use the Snyk action (instead of the Snyk base image) so that
# it respects the Go version we use.
uses: snyk/actions/golang@master
with:
args: --fail-on=upgradable
--severity-threshold=high
--file=operator/go.mod
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
security-executor:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: snyk/actions/setup@master
- uses: actions/setup-go@v3
with:
go-version: '^1.17.0'
- name: Set up executor's environmnet
# NOTE: The executor needs a couple extra steps before we can build it,
# like copying the operator's package into the executor's folder so that
# it's accessible.
run: make -C executor/ executor
- name: security-executor
run: snyk test \
--fail-on=upgradable
--severity-threshold=high
--file=executor/go.mod
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
security-image-executor:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-image-executor
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/seldon-core-executor:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=executor/Dockerfile.executor
security-image-operator:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-image-operator
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/seldon-core-operator:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=operator/Dockerfile
security-image-python-base:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-image-python-base
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/seldon-core-s2i-python37-ubi8:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=wrappers/s2i/python/Dockerfile
security-image-python-sklearn:
runs-on: ubuntu-latest
steps:
- name: security-image-python-sklearn
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/sklearnserver:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high
security-image-python-mlflow:
runs-on: ubuntu-latest
steps:
- name: security-image-python-mlflow
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/mlflowserver:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high
security-image-python-xgboost:
runs-on: ubuntu-latest
steps:
- name: security-image-python-xgboost
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/xgboostserver:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high
security-image-alibi-explain:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-image-alibi-explain
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/alibiexplainer:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=components/alibi-explain-server/Dockerfile
security-image-alibi-detect:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-image-alibi-detect
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/alibi-detect-server:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=components/alibi-detect-server/Dockerfile
security-image-initializer-rclone:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: security-image-request-logger
uses: snyk/actions/docker@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
image: seldonio/rclone-storage-initializer:1.18.0
args: --fail-on=upgradable --app-vulns --severity-threshold=high --file=components/rclone-storage-initializer/Dockerfile