Files
trivy-action/.github/workflows/test.yaml
T
Nikita Pivkin f685ba7215 ci: use action.yaml as single source of truth for Trivy version (#552)
* ci: use action.yaml as single source of truth for Trivy version

* dev: add yq check and configurable Trivy install directory
2026-04-10 17:29:15 +06:00

46 lines
1.0 KiB
YAML

name: Test
on:
push:
pull_request:
workflow_dispatch:
env:
BATS_LIB_PATH: '/usr/lib/'
jobs:
lint:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- name: Run zizmor
uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0
with:
advanced-security: false
test:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- name: Setup Bats and bats libs
id: setup-bats
uses: bats-core/bats-action@42fcc8700f773c075a16a90eb11674c0318ad507 # 3.0.1
- name: Install Trivy
run: make ensure-trivy TRIVY_INSTALL_DIR=/usr/local/bin
- name: Test
env:
BATS_LIB_PATH: ${{ steps.setup-bats.outputs.lib-path }}
run: make test