embeddevio/awg-dash
1
0
Fork 0
Code Issues 40 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Sprint 0 / #17: CI-пайплайн с гейтами (lint, unit+coverage>=70%, security, build, image-scan, push) #60

Merged
embeddevio merged 8 commits from feat/17-ci into main 2026-10-29 21:09:27 +03:00
Conversation 1 Commits 8 Files Changed 3
+6 -3
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 88bdaf7d3a - Show all commits
.gitea/workflows/ci.yml
+6 -3
View File
@@ -245,13 +245,16 @@ jobs:
if: needs.lint.outputs.has_dockerfile == 'true' if: needs.lint.outputs.has_dockerfile == 'true'
runs-on: ubuntu-latest runs-on: ubuntu-latest
env: env:
TRIVY_VERSION: "0.57.1" TRIVY_VERSION: "0.76.1"
TRIVY_SEVERITY: "HIGH,CRITICAL" TRIVY_SEVERITY: "HIGH,CRITICAL"
steps: steps:
- name: install trivy - name: install trivy
run: | run: |
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \ set -euo pipefail
| sh -s -- -b /usr/local/bin "v${TRIVY_VERSION}" curl -fsSL -o /tmp/trivy.tar.gz \
"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
tar -xzf /tmp/trivy.tar.gz -C /usr/local/bin trivy
chmod +x /usr/local/bin/trivy
trivy --version trivy --version
- name: "trivy image (HIGH/CRITICAL -> fail)" - name: "trivy image (HIGH/CRITICAL -> fail)"