Public Access
generated from Philipp/template-git
Merge branch 'main' into philipp-patch-1
Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 47s
Philipp/Global-Workflows: Pre-commit Lint (Scoped) / pre-commit (pull_request) Successful in 47s
This commit is contained in:
commit
a62f996eb5
3 files changed
+20
-42
No files matched your search
@@ -27,6 +27,7 @@ A self-contained Gitea and GitHub Actions composite action that extracts multi-p
|
||||
| `trivy-version` | Trivy version to install and verify | No | `0.74.0` |
|
||||
| `output-delta` | Output path for the CVE delta Markdown report | No | `cve-delta.md` |
|
||||
| `output-summary` | Output path for the full vulnerability Markdown summary | No | `cve-summary.md` |
|
||||
| `write-summary` | Whether to append the generated reports to the job summary (`$GITHUB_STEP_SUMMARY`) | No | `true` |
|
||||
|
||||
---
|
||||
|
||||
@@ -56,18 +57,11 @@ jobs:
|
||||
tags: registry.example.com/my-app:git-${{ github.sha }}
|
||||
|
||||
- name: Compare Vulnerabilities (Head vs Target)
|
||||
uses: Philipp/cve-differential@main
|
||||
uses: https://git.horstenkamp.eu/Philipp/cve-differential@main
|
||||
with:
|
||||
head-image: registry.example.com/my-app:git-${{ github.sha }}
|
||||
target-image: registry.example.com/my-app:latest
|
||||
target-branch: ${{ github.base_ref || 'main' }}
|
||||
|
||||
- name: Publish CVE Delta to Job Summary
|
||||
if: always()
|
||||
run: |
|
||||
if [ -f cve-delta.md ]; then
|
||||
cat cve-delta.md >> "$GITHUB_STEP_SUMMARY"
|
||||
fi
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
Reference in new issue
Block a user