From 1991028d2b4344ecf818a0de8f2c203c640b3ab4 Mon Sep 17 00:00:00 2001 From: Kjeld Schouten-Lebbing Date: Fri, 23 Dec 2022 20:00:19 +0100 Subject: [PATCH] fix(docs): ensure all helm chart portions are scanned during security scan --- .github/workflows/secgen.yaml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/secgen.yaml b/.github/workflows/secgen.yaml index bd10dc79b66..6e30f9ed265 100644 --- a/.github/workflows/secgen.yaml +++ b/.github/workflows/secgen.yaml @@ -58,7 +58,7 @@ jobs: local train="$3" echo "Rendering helm-template for ${chartname}" mkdir -p ${chart}/render - helm template ${chart} --output-dir ${chart}/render || echo "Helm template failed..." + helm template ${chart} >> ${chart}/render/app.yaml || echo "Helm template failed..." } helm_sec_scan() { local chart="$1" @@ -93,8 +93,7 @@ jobs: for container in $(cat ${chart}/render/containers.tmp); do echo "**Container: ${container}**" >> website/docs/charts/${train}/${chartname}/container-security.md echo "" >> website/docs/charts/${train}/${chartname}/container-security.md - ghcrcont=$(echo ${container} | sed "s/tccr.io/ghcr.io/g") - trivy image -f template --template "@./templates/trivy-container.tpl" ${ghcrcont} >> website/docs/charts/${train}/${chartname}/container-security.md || echo "trivy container scan failed..." + trivy image -f template --template "@./templates/trivy-container.tpl" ${container} >> website/docs/charts/${train}/${chartname}/container-security.md || echo "trivy container scan failed..." echo "" >> website/docs/charts/${train}/${chartname}/container-security.md done }