conformallab/ConformalLabpp
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

ci(ai): fix security scan — auth clone (org repo) + drop unsupported trivy flag
Some checks failed
Security / scan (push) Failing after 15s
Details

Browse Source
This commit is contained in:
user2595
2026-06-09 15:14:08 +00:00
parent a8e4631ad1
commit bb48e2ac1d
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.gitea/workflows/security.yml
View File

@@ -24,8 +24,10 @@ jobs:
- name: Tooling - name: Tooling
run: apk add --no-cache git curl bash tar python3 run: apk add --no-cache git curl bash tar python3
- name: Repo auschecken (git.eulernest.eu -> LAN via Runner-add-host) - name: Repo auschecken (Auto-Token — Org-Repo braucht Auth; LAN via add-host)
run: git clone --depth 1 "https://git.eulernest.eu/${GITHUB_REPOSITORY}.git" src env:
GITEA_TOKEN: ${{ github.token }}
run: git clone --depth 1 "https://x-access-token:${GITEA_TOKEN}@git.eulernest.eu/${GITHUB_REPOSITORY}.git" src
- name: Gitleaks (Secret-Scan, ARM64) - name: Gitleaks (Secret-Scan, ARM64)
id: gl id: gl
@@ -40,7 +42,7 @@ jobs:
run: | run: |
curl -sSL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \ curl -sSL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \
| sh -s -- -b /usr/local/bin | sh -s -- -b /usr/local/bin
cd src && trivy config --severity HIGH,CRITICAL --exit-code 1 --no-progress . 2>&1 | tee -a /tmp/scan.log cd src && trivy config --severity HIGH,CRITICAL --exit-code 1 . 2>&1 | tee -a /tmp/scan.log
echo "code=${PIPESTATUS[0]}" >> "$GITHUB_OUTPUT" echo "code=${PIPESTATUS[0]}" >> "$GITHUB_OUTPUT"
- name: Gate — hart blockieren bei Funden - name: Gate — hart blockieren bei Funden