chore(): Custom pipeline
continuous-integration/drone/push Build is passing Details

The image is to be used in the pipeline only
to generate a static website. We accept the
risk of criticals in the image but we scan it anyway.
This commit is contained in:
Elia el Lazkani 2023-07-06 00:25:36 +02:00
parent 5873fac737
commit 413f3d6b86
1 changed files with 1 additions and 2 deletions

View File

@ -47,7 +47,7 @@ steps:
REGISTRY_PASSWORD:
from_secret: registry_password
commands:
- generate-scan-report -i scm.project42.io/elia/nikola -t "${DRONE_COMMIT_SHA:0:8}" -g "${DRONE_COMMIT_SHA:0:8}"
- trivy image --image-src remote --exit-code 0 "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}"
depends_on:
- build-container
when:
@ -73,7 +73,6 @@ steps:
REGISTRY_PASSWORD:
from_secret: registry_password
commands:
- check-scan-report -i scm.project42.io/elia/nikola -t "${DRONE_COMMIT_SHA:0:8}"
- oras tag --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}" latest
depends_on:
- trivy-scan