Commit 159f38b4 authored by Andres Anaya Amariels's avatar Andres Anaya Amariels 🚀
Browse files

grype nginx scanning

parent 31ffbe51

capif/templates/ci_staging.gitlab-ci.yml

+16 −6
Original line number Diff line number Diff line
@@ -133,16 +133,26 @@ staging_cvs: 
    fi

    export TMP_PWD=$PWD

    echo "TMP_PWD=$TMP_PWD"

    echo "### build and push capif-client image###"

    cd services/capif-client/

    echo "---- variable ----"

    export IMAGE_NAME=capif-client

    echo "### build and push $IMAGE_NAME image###"

    cd services/$IMAGE_NAME/

    docker login --username $CI_REGISTRY_USER --password $CAPIF_DOCKER_REGISTRY $CI_REGISTRY

    docker build -t $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG .

    docker build -t $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/$IMAGE_NAME:$CI_COMMIT_REF_SLUG .

    cd $TMP_PWD

    echo "### Container Vulnerability Scanning###"

    ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/capif-client:$CI_COMMIT_REF_SLUG --scope all-layers > ./grype-outputs/grype_capif-client-$CI_COMMIT_REF_SLUG.txt

    ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/$IMAGE_NAME:$CI_COMMIT_REF_SLUG --scope all-layers > ./grype-outputs/grype_$IMAGE_NAME-$CI_COMMIT_REF_SLUG.txt

    echo "----------------------------------------------------"

    echo "---- variable ----"

    export IMAGE_NAME=nginx

    echo "### build and push $IMAGE_NAME image###"

    cd services/$IMAGE_NAME/

    docker login --username $CI_REGISTRY_USER --password $CAPIF_DOCKER_REGISTRY $CI_REGISTRY

    docker build -t $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/$IMAGE_NAME:$CI_COMMIT_REF_SLUG .

    cd $TMP_PWD

    echo "### Container Vulnerability Scanning###"

    ../grype $CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/$IMAGE_NAME:$CI_COMMIT_REF_SLUG --scope all-layers > ./grype-outputs/grype_$IMAGE_NAME-$CI_COMMIT_REF_SLUG.txt

    echo "----------------------------------------------------"

    cat ./grype-outputs/grype_capif-client-$CI_COMMIT_REF_SLUG.txt



  artifacts:

    untracked: false

    paths: