From cc07006e39d99d552ad47f402cb12d551e9c1eee Mon Sep 17 00:00:00 2001 From: lotyp Date: Sat, 6 Apr 2024 20:43:30 +0300 Subject: [PATCH 1/4] ci: add docker scout --- .github/workflows/test.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 1b4e6cd..3b4e044 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -105,3 +105,15 @@ jobs: export IMAGE_TEMPLATE=${{ matrix.php_version }}-${{ matrix.php_type }}-${{ matrix.os_name }} export IMAGE_TAG=${{ env.DOCKER_NAMESPACE }}:latest make test + + - name: 🔍 Run Docker Scout + id: docker-scout + uses: docker/scout-action@v1 + with: + command: cves,recommendations,compare + ignore-unchanged: true + only-fixed: true + only-severities: critical,high + github-token: ${{ secrets.GITHUB_TOKEN }} + dockerhub-user: ${{ secrets.DOCKER_USERNAME }} + dockerhub-password: ${{ secrets.DOCKER_TOKEN }} From 25ac58069240a51d05cde599ae395cc526dc1daa Mon Sep 17 00:00:00 2001 From: lotyp Date: Sat, 6 Apr 2024 20:49:48 +0300 Subject: [PATCH 2/4] ci: add docker scout --- .github/workflows/test.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3b4e044..77b0459 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -112,8 +112,10 @@ jobs: with: command: cves,recommendations,compare ignore-unchanged: true + to: wayofdev/php-base:${{ matrix.php_version }}-${{ matrix.php_type }}-${{ matrix.os_name }}-latest only-fixed: true only-severities: critical,high + keep-previous-comments: true github-token: ${{ secrets.GITHUB_TOKEN }} dockerhub-user: ${{ secrets.DOCKER_USERNAME }} dockerhub-password: ${{ secrets.DOCKER_TOKEN }} From f3f83c121bbb3b9f268d29a93110d967d72ef68b Mon Sep 17 00:00:00 2001 From: lotyp Date: Sat, 6 Apr 2024 21:56:38 +0300 Subject: [PATCH 3/4] ci: add docker scout --- .github/workflows/test.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 77b0459..20db35b 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -110,9 +110,8 @@ jobs: id: docker-scout uses: docker/scout-action@v1 with: - command: cves,recommendations,compare + command: cves,recommendations ignore-unchanged: true - to: wayofdev/php-base:${{ matrix.php_version }}-${{ matrix.php_type }}-${{ matrix.os_name }}-latest only-fixed: true only-severities: critical,high keep-previous-comments: true From 67418a40c9f65155331138b2e853775f7c3e80dc Mon Sep 17 00:00:00 2001 From: lotyp Date: Sat, 6 Apr 2024 21:59:12 +0300 Subject: [PATCH 4/4] ci: add docker scout --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 20db35b..22531fa 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -114,7 +114,7 @@ jobs: ignore-unchanged: true only-fixed: true only-severities: critical,high - keep-previous-comments: true + keep-previous-comments: false github-token: ${{ secrets.GITHUB_TOKEN }} dockerhub-user: ${{ secrets.DOCKER_USERNAME }} dockerhub-password: ${{ secrets.DOCKER_TOKEN }}