diff --git a/.github/license_scan_config.yml b/.github/license_scan_config.yml deleted file mode 100644 index bf7c4185..00000000 --- a/.github/license_scan_config.yml +++ /dev/null @@ -1,13 +0,0 @@ -format: table -vulnerability: - type: - - os - - library - ignore-unfixed: true -scan: - security-checks: - - license -license-full: true -severity: - - HIGH - - CRITICAL diff --git a/.github/workflows/license_scan.yml b/.github/workflows/license_scan.yml index 711695b6..7a0e0750 100644 --- a/.github/workflows/license_scan.yml +++ b/.github/workflows/license_scan.yml @@ -1,17 +1,16 @@ name: Trivy License Scan on: - pull_request: - branches: ["main"] + push: jobs: - license_scan: - name: license_scan + license_scan1: + name: License scan (rootfs) runs-on: ubuntu-latest timeout-minutes: 30 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v3 - name: Run license scanner uses: aquasecurity/trivy-action@master @@ -21,3 +20,20 @@ jobs: scanners: "license" severity: "CRITICAL,HIGH" exit-code: 1 + license_scan2: + name: License scan (repo) + runs-on: ubuntu-latest + timeout-minutes: 30 + steps: + - name: Checkout code + uses: actions/checkout@v3 + - name: npm install (client-ts) + run: cd extensions/broker-server-api/client-ts && npm install + - name: Run license scanner + uses: aquasecurity/trivy-action@master + with: + scan-type: "repo" + scan-ref: "." + scanners: "license" + severity: "CRITICAL,HIGH" + exit-code: 1