Templates/Next-Template-App-Router
Template
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: update vulnerability check to use Trivy scan
Some checks failed
CI/CD Pipeline / Quick Checks (pull_request) Successful in 20s
Details
CI/CD Pipeline / ESLint (pull_request) Successful in 11s
Details
CI/CD Pipeline / Build Application (pull_request) Has been cancelled
Details
CI/CD Pipeline / Security Audit (pull_request) Has been cancelled
Details
CI/CD Pipeline / Test & Coverage (pull_request) Has been cancelled
Details

Browse Source
This commit is contained in:
Jan-Marlon Leibl
2025-05-27 13:14:11 +02:00
parent 91ecb445fc
commit b8f32308c0
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.gitea/workflows/ci.yml
View File

@ -198,8 +198,10 @@ jobs:
- name: Install dependencies (if cache miss) - name: Install dependencies (if cache miss)
run: bun install --frozen-lockfile run: bun install --frozen-lockfile
- name: Run security audit - name: Run Trivy vulnerability scan
run: bun audit --audit-level moderate uses: aquasecurity/trivy-action@master
with:
- name: Run dependency vulnerability check scan-type: 'fs'
run: bunx audit-ci --moderate --report-type summary scan-ref: '.'
format: 'sarif'
output: 'trivy-results.sarif'