containers/.vib/kong/vib-verify.json

{
  "context": {
    "resources": {
      "url": "{SHA_ARCHIVE}",
      "path": "{VIB_ENV_PATH}"
    },
    "runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd"
  },
  "phases": {
    "package": {
      "actions": [
        {
          "action_id": "container-image-package",
          "params": {
            "application": {
              "details": {
                "name": "{VIB_ENV_CONTAINER}",
                "tag": "{VIB_ENV_TAG}"
              }
            }
          }
        },
        {
          "action_id": "container-image-lint",
          "params": {
            "threshold": "error"
          }
        }
      ]
    },
    "verify": {
      "actions": [
        {
          "action_id": "goss",
          "params": {
            "resources": {
              "path": "/.vib"
            },
            "tests_file": "kong/goss/goss.yaml",
            "vars_file": "kong/goss/vars.yaml",
            "remote": {
              "pod": {
                "workload": "deploy-kong"
              }
            }
          }
        },
        {
          "action_id": "trivy",
          "params": {
            "threshold": "CRITICAL",
            "vuln_type": [
              "OS"
            ]
          }
        },
        {
          "action_id": "grype",
          "params": {
            "threshold": "CRITICAL",
            "package_type": [
              "OS"
            ]
          }
        }
      ]
    }
  }
}