backport securitycheck

woodpecker-ci · May 10, 2023 · 96e861c · 96e861c
1 parent a08a072
commit 96e861c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.woodpecker/test.yml b/.woodpecker/test.yml
@@ -37,6 +37,16 @@ pipeline:
 #   when:
 #     path: *when_path
 
+  securitycheck:
+    group: test
+    image: aquasec/trivy:latest
+    commands:
+      - trivy fs --exit-code 0 --skip-dirs web/ --skip-dirs docs/ --severity UNKNOWN,LOW .
+      - trivy fs --exit-code 1 --skip-dirs web/ --skip-dirs docs/ --severity MEDIUM,HIGH,CRITICAL .
+    when:
+      path: *when_path
+    failure: ignore
+
   test:
     image: *golang_image
     group: test