mirror of
https://github.com/redhat-actions/push-to-registry.git
synced 2025-02-22 18:21:20 +01:00
0fa2dca2e8
* Update action.yml to use node20 * Update README.md with newer runner versions and fix typo * Update all workflows to use newer action versions and runner environments
35 lines
832 B
YAML
35 lines
832 B
YAML
name: Vulnerability Scan with CRDA
|
|
on:
|
|
# push:
|
|
workflow_dispatch:
|
|
# pull_request_target:
|
|
# types: [ assigned, opened, synchronize, reopened, labeled, edited ]
|
|
# schedule:
|
|
# - cron: '0 0 * * *' # every day at midnight
|
|
|
|
jobs:
|
|
crda-scan:
|
|
runs-on: ubuntu-22.04
|
|
name: Scan project vulnerability with CRDA
|
|
steps:
|
|
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Setup Node
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '20'
|
|
|
|
- name: Install CRDA
|
|
uses: redhat-actions/openshift-tools-installer@v1
|
|
with:
|
|
source: github
|
|
github_pat: ${{ github.token }}
|
|
crda: "latest"
|
|
|
|
- name: CRDA Scan
|
|
id: scan
|
|
uses: redhat-actions/crda@v1
|
|
with:
|
|
crda_key: ${{ secrets.CRDA_KEY }}
|
|
fail_on: never
|