Skip to content

First iteration of a CMMC Scoring chart page #497

First iteration of a CMMC Scoring chart page

First iteration of a CMMC Scoring chart page #497

Workflow file for this run

name: Trivy Scanner
on:
pull_request:
push:
branches:
- develop
schedule:
- cron: "0 21 * * 0"
jobs:
dotnet:
name: .NET Analysis
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- uses: actions/setup-dotnet@v4
with:
dotnet-version: "8.0.x"
- name: dotnet backend
run: dotnet build CSETWebApi/CSETWeb_Api/CSETWeb_Api.sln
- name: Run vulnerability scanner
uses: aquasecurity/trivy-action@0.29.0
with:
format: sarif
output: trivy-dotnet-results.sarif
scan-type: fs
scan-ref: ./CSETWebApi
scanners: vuln
severity: CRITICAL,HIGH
- name: Upload SARIF artifact
id: upload
uses: actions/upload-artifact@v4
with:
name: trivy-dotnet-results
path: trivy-dotnet-results.sarif
nodejs:
name: Node.js Analysis
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Run vulnerability scanner
uses: aquasecurity/trivy-action@0.29.0
with:
format: sarif
output: trivy-nodejs-results.sarif
scan-type: fs
scan-ref: ./CSETWebNg
severity: CRITICAL,HIGH
- name: Upload SARIF artifact
id: upload
uses: actions/upload-artifact@v4
with:
name: trivy-nodejs-results
path: trivy-nodejs-results.sarif
results:
name: Upload scan results
runs-on: ubuntu-latest
needs: [dotnet, nodejs]
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Download All Artifacts
uses: actions/download-artifact@v4
with:
path: .
merge-multiple: true
- name: Merge results
run: |
jq -s 'reduce .[] as $item ({}; . * $item)' trivy-*.sarif > trivy-results.sarif
- name: Upload scan results to Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: "trivy-results.sarif"