ci(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 in the all group across 1 directory #126
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json | |
| --- | |
| name: Scan Smoke Test | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| - ready_for_review | |
| workflow_dispatch: | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| smoke-test: | |
| name: 🧪 Scan Smoke Test | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 15 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: ⤵️ Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| lfs: true | |
| - name: 🚧 Setup Go | |
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| go-version-file: go.mod | |
| cache: true | |
| - name: 🚧 Setup Task | |
| uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0 | |
| - name: 🔀 Download dependencies | |
| run: go mod download | |
| - name: 🏗️ Build | |
| run: task build | |
| - name: 📌 Load tool versions | |
| run: | | |
| source .github/tool-versions.sh | |
| echo "SYFT_VERSION=$SYFT_VERSION" >> "$GITHUB_ENV" | |
| echo "SYFT_INSTALLER_SHA=$SYFT_INSTALLER_SHA" >> "$GITHUB_ENV" | |
| echo "TRIVY_VERSION=$TRIVY_VERSION" >> "$GITHUB_ENV" | |
| echo "TRIVY_INSTALLER_SHA=$TRIVY_INSTALLER_SHA" >> "$GITHUB_ENV" | |
| - name: 🔧 Install Syft | |
| run: | | |
| curl -sSfL "https://raw.githubusercontent.com/anchore/syft/${SYFT_INSTALLER_SHA}/install.sh" | sh -s -- -b /usr/local/bin "${SYFT_VERSION}" | |
| - name: 🔧 Install Trivy | |
| run: | | |
| curl -sSfL "https://raw.githubusercontent.com/aquasecurity/trivy/${TRIVY_INSTALLER_SHA}/contrib/install.sh" | sh -s -- -b /usr/local/bin "${TRIVY_VERSION}" | |
| - name: 🔍 Run smoke test scan | |
| run: | | |
| ./bin/linux-amd64/sbi scan \ | |
| --database smoke-test.db \ | |
| --config-dir config/smoke-test \ | |
| --output smoke-test-report.md \ | |
| --max-tags 1 \ | |
| --comprehensive \ | |
| -v | |
| - name: 📊 Verify results | |
| run: | | |
| echo "=== Database stats ===" | |
| sqlite3 smoke-test.db 'SELECT COUNT(*) as images FROM images;' | |
| IMAGE_COUNT=$(sqlite3 smoke-test.db 'SELECT COUNT(*) FROM images;') | |
| if [ "$IMAGE_COUNT" -eq 0 ]; then | |
| echo "ERROR: No images in database" | |
| exit 1 | |
| fi | |
| echo "=== Report preview ===" | |
| head -50 smoke-test-report.md |