From 413f3d6b863960cc2cbde68cef04a41effd27cb7 Mon Sep 17 00:00:00 2001 From: Elia el Lazkani Date: Thu, 6 Jul 2023 00:25:36 +0200 Subject: [PATCH] chore(): Custom pipeline The image is to be used in the pipeline only to generate a static website. We accept the risk of criticals in the image but we scan it anyway. --- .drone.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.drone.yml b/.drone.yml index 6bee5e4..03ec6d2 100644 --- a/.drone.yml +++ b/.drone.yml @@ -47,7 +47,7 @@ steps: REGISTRY_PASSWORD: from_secret: registry_password commands: - - generate-scan-report -i scm.project42.io/elia/nikola -t "${DRONE_COMMIT_SHA:0:8}" -g "${DRONE_COMMIT_SHA:0:8}" + - trivy image --image-src remote --exit-code 0 "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}" depends_on: - build-container when: @@ -73,7 +73,6 @@ steps: REGISTRY_PASSWORD: from_secret: registry_password commands: - - check-scan-report -i scm.project42.io/elia/nikola -t "${DRONE_COMMIT_SHA:0:8}" - oras tag --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}" latest depends_on: - trivy-scan