DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 31 Packages Projects Releases 1 Wiki Activity

fix(docs): prevent too-early failure of security check script

Browse Source
This commit is contained in:
Kjeld Schouten-Lebbing
2022-12-23 18:35:19 +01:00
parent 316f5a1fc0
commit e1756d34aa
1 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/secgen.yaml
+2 -5
View File
@@ -94,7 +94,7 @@ jobs:
echo "**Container: ${container}**" >> website/docs/charts/${train}/${chartname}/container-security.md echo "**Container: ${container}**" >> website/docs/charts/${train}/${chartname}/container-security.md
echo "" >> website/docs/charts/${train}/${chartname}/container-security.md echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
ghcrcont=$(echo ${container} | sed "s/tccr.io/ghcr.io/g") ghcrcont=$(echo ${container} | sed "s/tccr.io/ghcr.io/g")
trivy image -f template --template "@./templates/trivy-container.tpl" ${ghcrcont} >> website/docs/charts/${train}/${chartname}/container-security.md trivy image -f template --template "@./templates/trivy-container.tpl" ${ghcrcont} >> website/docs/charts/${train}/${chartname}/container-security.md || echo "trivy container scan failed..."
echo "" >> website/docs/charts/${train}/${chartname}/container-security.md echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
done done
} }
@@ -112,10 +112,7 @@ jobs:
for train in enterprise stable incubator dependency; do for train in enterprise stable incubator dependency; do
echo "Processing Charts for Train: ${train}..." echo "Processing Charts for Train: ${train}..."
for chart in $(ls "charts/${train}"); do for chart in $(ls "charts/${train}"); do
render "charts/${train}/${chart}" ${chart} ${train} render "charts/${train}/${chart}" ${chart} ${train} && helm_sec_scan "charts/${train}/${chart}" ${chart} ${train} && container_sec_scan "charts/${train}/${chart}" ${chart} ${train} && cleanfiles "charts/${train}/${chart}" ${chart} ${train} || echo "processing failed for ${chart}"
helm_sec_scan "charts/${train}/${chart}" ${chart} ${train}
container_sec_scan "charts/${train}/${chart}" ${chart} ${train}
cleanfiles "charts/${train}/${chart}" ${chart} ${train}
done done
done done
echo "finsihed security scan" echo "finsihed security scan"