Loading capif/templates/ci_staging.gitlab-ci.yml +10 −1 Original line number Diff line number Diff line Loading @@ -123,6 +123,7 @@ staging_cvs: - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b ../ - echo "### grype version###" - ../grype version - mkdir ../grype-outputs - export TMP_PWD=$PWD - echo "TMP_PWD=$TMP_PWD" - echo "### build and push capif-client image###" Loading @@ -131,8 +132,16 @@ staging_cvs: - docker build -t $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG . - cd $TMP_PWD - echo "### Container Vulnerability Scanning###" - ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG --scope all-layers - ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG --scope all-layers \ --output table > ../grype-outputs/grype_capif-client-$CI_COMMIT_REF_SLUG.txt - echo "----------------------------------------------------" artifacts: untracked: false paths: - ../grype-outputs/*.txt when: on_success access: all expire_in: "1 week" <<: *staging_common staging_build_and_push: Loading Loading
capif/templates/ci_staging.gitlab-ci.yml +10 −1 Original line number Diff line number Diff line Loading @@ -123,6 +123,7 @@ staging_cvs: - curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b ../ - echo "### grype version###" - ../grype version - mkdir ../grype-outputs - export TMP_PWD=$PWD - echo "TMP_PWD=$TMP_PWD" - echo "### build and push capif-client image###" Loading @@ -131,8 +132,16 @@ staging_cvs: - docker build -t $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG . - cd $TMP_PWD - echo "### Container Vulnerability Scanning###" - ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG --scope all-layers - ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG --scope all-layers \ --output table > ../grype-outputs/grype_capif-client-$CI_COMMIT_REF_SLUG.txt - echo "----------------------------------------------------" artifacts: untracked: false paths: - ../grype-outputs/*.txt when: on_success access: all expire_in: "1 week" <<: *staging_common staging_build_and_push: Loading