mirror of
https://github.com/nicotsx/zerobyte.git
synced 2026-04-20 23:09:16 -04:00
55e68544f8
* ci: add grype security checks before release and in pr * ci: only build for amd64 in local build
36 lines
652 B
YAML
36 lines
652 B
YAML
name: Checks
|
|
|
|
permissions:
|
|
contents: read
|
|
security-events: write
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
ci:
|
|
timeout-minutes: 15
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v5
|
|
with:
|
|
fetch-depth: 0
|
|
ref: ${{ github.ref }}
|
|
|
|
- name: Scan current project
|
|
id: scan
|
|
uses: anchore/scan-action@v7
|
|
with:
|
|
path: "."
|
|
|
|
- name: upload Anchore scan SARIF report
|
|
uses: github/codeql-action/upload-sarif@v4
|
|
with:
|
|
sarif_file: ${{ steps.scan.outputs.sarif }}
|