Skip to content

feature/mx-1402 prepare mex.common for use with dagster #221

feature/mx-1402 prepare mex.common for use with dagster

feature/mx-1402 prepare mex.common for use with dagster #221

Workflow file for this run

name: CVE Scan
on:
pull_request:
schedule:
- cron: '0 2 * * *'
workflow_dispatch:
jobs:
scan:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Checkout repo
uses: actions/checkout@v3
with:
fetch-depth: 1
- name: Cache trivy
uses: actions/cache@v3
env:
cache-name: cache-trivy
with:
path: ~/.cache/trivy
key: ${{ env.cache-name }}-${{ hashFiles('poetry.lock') }}
restore-keys: |
${{ env.cache-name }}-
- name: Run trivy
uses: aquasecurity/trivy-action@master
with:
exit-code: 1
format: 'sarif'
output: 'trivy-results.sarif'
scan-ref: '.'
scan-type: 'fs'
severity: 'CRITICAL,HIGH'
list-all-pkgs: 'true'
ignore-unfixed: true
- name: Publish results
uses: github/codeql-action/upload-sarif@v2
if: always()
with:
sarif_file: 'trivy-results.sarif'