comparison .github/workflows/anchore.yml @ 7641:bdc81c1e2eec

build(deps): bump actions/checkout from 4.0.0 to 4.1.0 - https://github.com/roundup-tracker/roundup/pull/50
author John Rouillard <rouilj@ieee.org>
date Sun, 24 Sep 2023 21:33:52 -0400
parents 926ea14c3450
children 964250da5743
comparison
equal deleted inserted replaced
7640:cea108761b8c 7641:bdc81c1e2eec
35 security-events: write # for github/codeql-action/upload-sarif to upload SARIF results 35 security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
36 actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status 36 actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
37 runs-on: ubuntu-latest 37 runs-on: ubuntu-latest
38 steps: 38 steps:
39 - name: Checkout the code 39 - name: Checkout the code
40 uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 40 uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
41 - name: Build the Docker image 41 - name: Build the Docker image
42 run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest 42 run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest
43 - name: List the Docker image 43 - name: List the Docker image
44 run: docker image ls 44 run: docker image ls
45 - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled 45 - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled

Roundup Issue Tracker: http://roundup-tracker.org/