DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 30 Packages Projects Releases 1 Wiki Activity

fix(docs): ensure all helm chart portions are scanned during security scan

Browse Source
This commit is contained in:
Kjeld Schouten-Lebbing
2022-12-23 20:00:19 +01:00
parent 9fe87ace24
commit 1991028d2b
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/secgen.yaml
+2 -3
View File
@@ -58,7 +58,7 @@ jobs:
local train="$3" local train="$3"
echo "Rendering helm-template for ${chartname}" echo "Rendering helm-template for ${chartname}"
mkdir -p ${chart}/render mkdir -p ${chart}/render
helm template ${chart} --output-dir ${chart}/render || echo "Helm template failed..." helm template ${chart} >> ${chart}/render/app.yaml || echo "Helm template failed..."
} }
helm_sec_scan() { helm_sec_scan() {
local chart="$1" local chart="$1"
@@ -93,8 +93,7 @@ jobs:
for container in $(cat ${chart}/render/containers.tmp); do for container in $(cat ${chart}/render/containers.tmp); do
echo "**Container: ${container}**" >> website/docs/charts/${train}/${chartname}/container-security.md echo "**Container: ${container}**" >> website/docs/charts/${train}/${chartname}/container-security.md
echo "" >> website/docs/charts/${train}/${chartname}/container-security.md echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
ghcrcont=$(echo ${container} | sed "s/tccr.io/ghcr.io/g") trivy image -f template --template "@./templates/trivy-container.tpl" ${container} >> website/docs/charts/${train}/${chartname}/container-security.md || echo "trivy container scan failed..."
trivy image -f template --template "@./templates/trivy-container.tpl" ${ghcrcont} >> website/docs/charts/${train}/${chartname}/container-security.md || echo "trivy container scan failed..."
echo "" >> website/docs/charts/${train}/${chartname}/container-security.md echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
done done
} }