diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml deleted file mode 100644 index 73520a3..0000000 --- a/.github/workflows/trivy.yml +++ /dev/null @@ -1,63 +0,0 @@ -name: Scan Image - -on: - push: - branches: - - main - repository_dispatch: - types: [build-completed] - branches: - - main - workflow_dispatch: - -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -jobs: - scan: - runs-on: ubuntu-latest - permissions: - attestations: write - contents: write - id-token: write - packages: read - security-events: write - - steps: - - name: Checkout Repository - uses: actions/checkout@v4.1.7 - with: - fetch-depth: 1 - - - name: TruffleHog OSS - uses: trufflesecurity/trufflehog@v3.82.5 - - - name: Login to GitHub Container Registry - uses: docker/login-action@v3 - with: - registry: ghcr.io - username: ${{ github.repository_owner }} - password: ${{ secrets.GITHUB_TOKEN }} - - - name: Pull Docker Image - run: docker pull ghcr.io/drengskapur/pptx2video:latest - - - name: Aqua Security Trivy Scan - uses: aquasecurity/trivy-action@0.24.0 - with: - image-ref: ghcr.io/drengskapur/pptx2video:latest - format: sarif - output: trivy-results.sarif - - - name: Upload Trivy SARIF Report - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: trivy-results.sarif - - - - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: results.sarif