Skip to content

ci: scan images with prisma #7988

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 12, 2023
Merged

ci: scan images with prisma #7988

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c32a372
feat: add prisma cloud image scanning
coadler Jun 12, 2023
7ff1c49
fixup! feat: add prisma cloud image scanning
coadler Jun 12, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion .github/workflows/security.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,9 @@ on:

schedule:
# Run every 6 hours Monday-Friday!
- cron: "0 0,6,12,18 * * 1-5"
- cron: "0 0/6 * * 1-5"

push:

# Cancel in-progress runs for pull requests when developers push
# additional changes
Expand Down Expand Up @@ -117,6 +119,14 @@ jobs:
make -j "$image_job"
echo "image=$(cat "$image_job")" >> $GITHUB_OUTPUT

- name: Run Prisma Cloud image scan
uses: PaloAltoNetworks/prisma-cloud-scan@v1
with:
pcc_console_url: ${{ secrets.PRISMA_CLOUD_URL }}
pcc_user: ${{ secrets.PRISMA_CLOUD_ACCESS_KEY }}
pcc_pass: ${{ secrets.PRISMA_CLOUD_SECRET_KEY }}
image_name: ${{ steps.build.outputs.image }}

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@41f05d9ecffa2ed3f1580af306000f734b733e54
with:
Expand Down