From eb3cc1861055d3b364d9ecf17f677e754337df45 Mon Sep 17 00:00:00 2001 From: St-Ilya Date: Mon, 23 Dec 2024 16:09:26 +0300 Subject: [PATCH] delete trivy and change branch jdk for tests --- .github/workflows/maven-service-build.yml | 24 ++--------------------- 1 file changed, 2 insertions(+), 22 deletions(-) diff --git a/.github/workflows/maven-service-build.yml b/.github/workflows/maven-service-build.yml index 0675178..35bc1fe 100644 --- a/.github/workflows/maven-service-build.yml +++ b/.github/workflows/maven-service-build.yml @@ -31,7 +31,7 @@ jobs: uses: actions/checkout@v4 - name: Run Build Java - uses: valitydev/action-jdk-build@trivy + uses: valitydev/action-jdk-build@changeBranchTrivy with: jdk-version: ${{ inputs.java-version }} jdk-distribution: ${{ inputs.java-distribution }} @@ -45,7 +45,7 @@ jobs: uses: actions/checkout@v4 - name: Run Build Java - uses: valitydev/action-jdk-build@trivy + uses: valitydev/action-jdk-build@changeBranchTrivy with: jdk-version: ${{ inputs.java-version }} jdk-distribution: ${{ inputs.java-distribution }} @@ -54,23 +54,3 @@ jobs: - name: Upload code coverage uses: codecov/codecov-action@v4 - scan: - name: Scan with Trivy - needs: build - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - name: Install Trivy CLI - run: | - wget https://github.com/aquasecurity/trivy/releases/download/v0.39.1/trivy_0.39.1_Linux-64bit.deb - sudo dpkg -i trivy_0.39.1_Linux-64bit.deb - - uses: actions/download-artifact@v3 - with: - name: bom.json - - name: Run Trivy with SBOM - run: trivy sbom --severity CRITICAL,HIGH --format sarif -o trivy-report.sarif ./bom.json - - - name: Upload SARIF report - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: trivy-report.sarif