Skip to content

Commit

Permalink
Minor Fixes to Action (#797)
Browse files Browse the repository at this point in the history
* Add workflow

* Update obaas-base-image.yml

Change usage to comply with action restrictions

* move directory

* use github.repository

* switch back to github.repository_owner

* Formating
  • Loading branch information
gotsysdba authored Dec 5, 2023
1 parent 989a30b commit bff6b65
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 1 deletion.
File renamed without changes.
6 changes: 5 additions & 1 deletion .github/workflows/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,10 +7,14 @@ This workflow takes the GraalVM image from Oracle Container Registry, scans for
### Workflow

1. Download the latest, patched GraalVM OBaaS image from the ghcr.io

a. If no image exists in ghcr.io, download the latest GraalVM image from Oracle Container Registry and stage in ghcr.io
2. Run Trivy Vulnerability scanner against the ghcr.io image

a. If Trivy does not find any vulnerabilities, **end workflow**

b. If Trivy reports vulnerabilities, attempt to apply OS patches
3. Compare exiting ghcr.io image with attempt of patched image

a. If existing image is same as patched image (no OS updates), **end workflow**
4. Push newly patched image as latest
4. Push newly patched image as latest

0 comments on commit bff6b65

Please sign in to comment.