Skip to content

Commit c47d3a0

Browse files
committed
reduce workflows to reduce number of caching steps
1 parent dca6d72 commit c47d3a0

File tree

2 files changed

+19
-111
lines changed

2 files changed

+19
-111
lines changed

.github/workflows/ci.yml

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,25 @@ jobs:
7777
- name: Run tests
7878
run: cargo test --lib --bins --tests --verbose
7979

80+
- name: Run FOSSA scan and upload build data
81+
uses: fossa-contrib/fossa-action@cdc5065bcdee31a32e47d4585df72d66e8e941c2 # v3.0.0
82+
with:
83+
fossa-api-key: ${{ secrets.FOSSA_API_KEY }}
84+
github-token: ${{ github.token }}
85+
86+
- name: Run Trivy vulnerability scanner in repo mode
87+
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
88+
with:
89+
scan-type: fs
90+
scanners: vuln
91+
ignore-unfixed: true
92+
format: sarif
93+
output: trivy-results.sarif
94+
# - name: Upload Trivy scan results to GitHub Security tab
95+
# uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
96+
# with:
97+
# sarif_file: trivy-results.sarif
98+
8099
build-and-publish:
81100
name: Build and Publish Docker Image
82101
needs: build-and-test

.github/workflows/scan.yml

Lines changed: 0 additions & 111 deletions
This file was deleted.

0 commit comments

Comments
 (0)