mirror of
https://github.com/bitnami/containers.git
synced 2026-03-13 14:58:03 +08:00
255b403872
* Add grype action to verify phase Signed-off-by: Fran Mulero <fmulero@vmware.com> * Remove application.kind Signed-off-by: Fran Mulero <fmulero@vmware.com>
74 lines
1.5 KiB
JSON
74 lines
1.5 KiB
JSON
{
|
|
"context": {
|
|
"resources": {
|
|
"url": "{SHA_ARCHIVE}",
|
|
"path": "{VIB_ENV_PATH}"
|
|
}
|
|
},
|
|
"phases": {
|
|
"package": {
|
|
"actions": [
|
|
{
|
|
"action_id": "container-image-package",
|
|
"params": {
|
|
"application": {
|
|
"details": {
|
|
"name": "{VIB_ENV_CONTAINER}",
|
|
"tag": "{VIB_ENV_TAG}"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"action_id": "container-image-lint",
|
|
"params": {
|
|
"threshold": "error"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"verify": {
|
|
"actions": [
|
|
{
|
|
"action_id": "trivy",
|
|
"params": {
|
|
"threshold": "CRITICAL",
|
|
"vuln_type": [
|
|
"OS"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"action_id": "grype",
|
|
"params": {
|
|
"threshold": "CRITICAL",
|
|
"package_type": [
|
|
"OS"
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"publish": {
|
|
"actions": [
|
|
{
|
|
"action_id": "container-image-publish",
|
|
"params": {
|
|
"application": {
|
|
"details": {
|
|
"name": "{VIB_ENV_CONTAINER}",
|
|
"tag": "{VIB_ENV_TAG}"
|
|
}
|
|
},
|
|
"repository": {
|
|
"kind": "OCI",
|
|
"url": "{VIB_ENV_REGISTRY_URL}",
|
|
"username": "{VIB_ENV_REGISTRY_USERNAME}",
|
|
"password": "{VIB_ENV_REGISTRY_PASSWORD}"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
} |