This commit is contained in:
14
.drone.yml
14
.drone.yml
@@ -79,16 +79,12 @@ steps:
|
||||
- push
|
||||
- tag
|
||||
|
||||
- name: scan-image
|
||||
image: aquasec/trivy:latest
|
||||
environment:
|
||||
TRIVY_USERNAME:
|
||||
from_secret: docker_username
|
||||
TRIVY_PASSWORD:
|
||||
from_secret: docker_password
|
||||
- name: verify-image
|
||||
image: alpine:latest
|
||||
commands:
|
||||
- echo "Scanning image for vulnerabilities..."
|
||||
- trivy image --exit-code 0 --severity HIGH,CRITICAL registry.nevetime.ru/mc-panel:${DRONE_COMMIT_SHA:0:8}
|
||||
- echo "Image built successfully: registry.nevetime.ru/mc-panel:${DRONE_COMMIT_SHA:0:8}"
|
||||
- echo "Security scanning can be done manually with:"
|
||||
- echo "trivy image registry.nevetime.ru/mc-panel:${DRONE_COMMIT_SHA:0:8}"
|
||||
when:
|
||||
event:
|
||||
- push
|
||||
|
||||
Reference in New Issue
Block a user