admin/n8n-enterprise-unlocked
1
0
Fork 0
mirror of https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git synced 2025-12-16 17:46:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: Pass correct secrets to Trivy (#18139)

Browse Source
This commit is contained in:
shortstacked
2025-08-08 19:44:57 +01:00
committed by GitHub
parent c610c3af3e
commit a3b625fc18
2 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/docker-build-push.yml vendored
View File

@@ -393,5 +393,4 @@ jobs:
uses: ./.github/workflows/security-trivy-scan-callable.yml uses: ./.github/workflows/security-trivy-scan-callable.yml
with: with:
image_ref: ${{ needs.build-and-push-docker.outputs.image_ref }} image_ref: ${{ needs.build-and-push-docker.outputs.image_ref }}
secrets: secrets: inherit
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

4
.github/workflows/security-trivy-scan-callable.yml vendored
View File

@@ -21,7 +21,7 @@ permissions:
contents: read contents: read
env: env:
SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} SLACK_BOT_TOKEN: ${{ secrets.QBOT_SLACK_TOKEN }}
SLACK_CHANNEL_ID: C042WDXPTEZ #mission-security SLACK_CHANNEL_ID: C042WDXPTEZ #mission-security
jobs: jobs:
@@ -36,7 +36,7 @@ jobs:
image-ref: ${{ inputs.image_ref }} image-ref: ${{ inputs.image_ref }}
format: 'json' format: 'json'
output: 'trivy-results.json' output: 'trivy-results.json'
severity: 'CRITICAL,HIGH' severity: 'CRITICAL,HIGH,MEDIUM,LOW'
ignore-unfixed: false ignore-unfixed: false
exit-code: '0' exit-code: '0'