jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipeline rewrite v6

Browse Source
This commit is contained in:
Josh 2025-08-08 13:30:48 +00:00
parent 64fab06e8a
commit ad31a9ca27
1 changed files with 11 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
.woodpecker.yml
View File

@ -14,21 +14,19 @@ steps:
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev)
REG=us-central1-docker.pkg.dev/aptivaai-dev/aptiva-repo
# Fetch Trivy standalone binary (no apt, no docker required)
TRIVY_VERSION=0.52.0
curl -fsSL -o /tmp/trivy.tgz \
"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
tar -xzf /tmp/trivy.tgz -C /usr/local/bin trivy
chmod +x /usr/local/bin/trivy
apt-get update -qq
apt-get install -y -qq gnupg apt-transport-https curl ca-certificates docker.io
# Auth to Artifact Registry for Trivy's registry client
export TRIVY_USERNAME=oauth2accesstoken
export TRIVY_PASSWORD="$(gcloud auth print-access-token)"
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | bash
export PATH="$PATH:$(pwd)/bin"
gcloud auth configure-docker us-central1-docker.pkg.dev -q
trivy image --exit-code 1 --severity CRITICAL $REG/server1:$IMG_TAG
trivy image --exit-code 1 --severity CRITICAL $REG/server2:$IMG_TAG
trivy image --exit-code 1 --severity CRITICAL $REG/server3:$IMG_TAG
trivy image --exit-code 1 --severity CRITICAL $REG/nginx:$IMG_TAG
trivy image --exit-code 1 --severity CRITICAL "$REG/server1:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL "$REG/server2:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL "$REG/server3:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG"
- name: staging-deploy
image: google/cloud-sdk:latest