Skip to content

Testing GHA

Testing GHA #2

Workflow file for this run

name: Run Fossa Scan
on:
push:
tags:
- '*'
branches:
- "gha-*" # for testing
pull_request:
jobs:
fossa:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout Repo
uses: actions/checkout@v4
- name: Get base image
id: base
run: |

Check failure on line 22 in .github/workflows/trivy.yaml

View workflow run for this annotation

GitHub Actions / Run Fossa Scan

Invalid workflow file

The workflow is not valid. .github/workflows/trivy.yaml (Line: 22, Col: 14): Unrecognized named-value: 'grep'. Located at position 1 within expression: grep hyperkube-base Dockerfile | awk '{ print $$2 }}'
echo "hyberkube=${{ grep hyperkube-base Dockerfile | awk '{ print $$2 }}'}}" >> "$GITHUB_ENV"
- name: Run Trivy scanner
uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # v0.19.0
with:
image-ref: ${{ steps.base.outputs.hyberkube }}
exit-code: '1'
severity: 'CRITICAL,HIGH'