Modificar .gitea/workflows/deploy.yaml
DevSecOps Enterprise Pipeline / security-gate-and-deploy (push) Successful in 1m9s
DevSecOps Enterprise Pipeline / security-gate-and-deploy (push) Successful in 1m9s
deploy atualizado
This commit is contained in:
@@ -20,7 +20,7 @@ jobs:
|
|||||||
- name: Gitleaks Scan
|
- name: Gitleaks Scan
|
||||||
run: |
|
run: |
|
||||||
curl -sL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar -xz -C /tmp
|
curl -sL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar -xz -C /tmp
|
||||||
/tmp/gitleaks protect --source . --verbose --redact --staged --exit-code 1
|
/tmp/gitleaks detect --source . --verbose --redact --log-opts="-1" --exit-code 1
|
||||||
|
|
||||||
# 1.2. Software Composition Analysis (SCA): Check for infrastructure vulnerabilities
|
# 1.2. Software Composition Analysis (SCA): Check for infrastructure vulnerabilities
|
||||||
- name: Scan Docker Image Vulnerabilities (Trivy)
|
- name: Scan Docker Image Vulnerabilities (Trivy)
|
||||||
|
|||||||
Reference in New Issue
Block a user