chore(): Custom pipeline
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
The image is to be used in the pipeline only to generate a static website. We accept the risk of criticals in the image but we scan it anyway.
This commit is contained in:
parent
5873fac737
commit
413f3d6b86
1 changed files with 1 additions and 2 deletions
|
@ -47,7 +47,7 @@ steps:
|
||||||
REGISTRY_PASSWORD:
|
REGISTRY_PASSWORD:
|
||||||
from_secret: registry_password
|
from_secret: registry_password
|
||||||
commands:
|
commands:
|
||||||
- generate-scan-report -i scm.project42.io/elia/nikola -t "${DRONE_COMMIT_SHA:0:8}" -g "${DRONE_COMMIT_SHA:0:8}"
|
- trivy image --image-src remote --exit-code 0 "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}"
|
||||||
depends_on:
|
depends_on:
|
||||||
- build-container
|
- build-container
|
||||||
when:
|
when:
|
||||||
|
@ -73,7 +73,6 @@ steps:
|
||||||
REGISTRY_PASSWORD:
|
REGISTRY_PASSWORD:
|
||||||
from_secret: registry_password
|
from_secret: registry_password
|
||||||
commands:
|
commands:
|
||||||
- check-scan-report -i scm.project42.io/elia/nikola -t "${DRONE_COMMIT_SHA:0:8}"
|
|
||||||
- oras tag --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}" latest
|
- oras tag --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/nikola:${DRONE_COMMIT_SHA:0:8}" latest
|
||||||
depends_on:
|
depends_on:
|
||||||
- trivy-scan
|
- trivy-scan
|
||||||
|
|
Loading…
Reference in a new issue