[anchore] more detailed Dockerfile scan reports (#12159)

This commit is contained in:
Ivan Blinkov 2020-07-06 11:19:48 +03:00 committed by GitHub
parent b6a19b5eff
commit 0e8fad6844
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -10,7 +10,9 @@ name: Docker Container Scan (clickhouse-server)
on: on:
pull_request: pull_request:
paths: docker/server/Dockerfile paths:
- docker/server/Dockerfile
- .github/workflows/anchore-analysis.yml
schedule: schedule:
- cron: '0 21 * * *' - cron: '0 21 * * *'
@ -31,6 +33,12 @@ jobs:
image-reference: "localbuild/testimage:latest" image-reference: "localbuild/testimage:latest"
dockerfile-path: "docker/server/Dockerfile" dockerfile-path: "docker/server/Dockerfile"
acs-report-enable: true acs-report-enable: true
fail-build: true
- name: Upload artifact
uses: actions/upload-artifact@v1.0.0
with:
name: AnchoreReports
path: ./anchore-reports/
- name: Upload Anchore Scan Report - name: Upload Anchore Scan Report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v1
with: with: