chore(ci): removed trivy scan from main workflow

visibilityspots · Jan 19, 2024 · 5b6d001 · 5b6d001
1 parent 9090e48
commit 5b6d001
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 34 deletions.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -6,7 +6,6 @@ on:
       - '*'
 
 jobs:
-
   test:
     runs-on: ubuntu-latest
     steps:
@@ -25,38 +24,8 @@ jobs:
           GOSS_FILES_STRATEGY: cp
         run: dgoss run visibilityspots/cloudflared:dev
 
-      - name: Cache image
-        uses: ishworkh/container-image-artifact-upload@v1.0.0
-        with:
-          image: "visibilityspots/cloudflared:dev"
-
-  scan:
-    needs: test
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Fetch cached image
-        uses: ishworkh/container-image-artifact-download@v1.0.0
-        with:
-          image: "visibilityspots/cloudflared:dev"
-
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@0.16.1
-        with:
-          image-ref: 'visibilityspots/cloudflared:dev'
-          format: 'template'
-          template: 'sarif'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH'
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
-        with:
-          sarif_file: 'trivy-results.sarif'
-
   deploy:
-    needs: scan
+    needs: test
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -22,7 +22,6 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    name: Build
     runs-on: "ubuntu-latest"
     steps:
       - name: Checkout code
@@ -43,4 +42,4 @@ jobs:
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
         with:
-          sarif_file: 'trivy-results.sarif'
+          sarf_file: 'trivy-results.sarif'