Node / ReticulumProjects / MeshChatX.git / files / .gitea / workflows / scan.yml

Displaying Raw • Download

Tff7b72nameTb4b4b4: Ta5d6ffSecurityTa5d6ff Ta5d6ffScans

Tff7b72onTb4b4b4:

Tff7b72scheduleTb4b4b4:

Tb4b4b4- Tff7b72cronTb4b4b4: Ta5d6ff"Ta5d6ff30Te6edf3 Ta5d6ff12Te6edf3 Ta5d6ff*Te6edf3 Ta5d6ff*Te6edf3 Ta5d6ff1Ta5d6ff"

Tff7b72pushTb4b4b4:

Tff7b72branchesTb4b4b4: Tb4b4b4[Te6edf3masterTb4b4b4, Te6edf3devTb4b4b4]

Tff7b72workflow_dispatchTb4b4b4:

Tff7b72permissionsTb4b4b4:

Tff7b72contentsTb4b4b4: Ta5d6ffread

Tff7b72jobsTb4b4b4:

Tff7b72scanTb4b4b4:

Tff7b72runs-onTb4b4b4: Ta5d6ffubuntu-latest

Tff7b72stepsTb4b4b4:

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffCheckout

Tff7b72runTb4b4b4: Tb4b4b4|

Tff7b72set -eu

Tff7b72SERVER="${GITEA_SERVER_URL:-${GITHUB_SERVER_URL:-}}"

Tff7b72REPO="${GITEA_REPOSITORY:-${GITHUB_REPOSITORY:-}}"

Tff7b72if [ -z "$SERVER" ] || [ -z "$REPO" ]; then

Tff7b72echo "Checkout: set GITEA_SERVER_URL/GITEA_REPOSITORY or GITHUB_SERVER_URL/GITHUB_REPOSITORY" >&2

Tff7b72exit 1

Tff7b72fi

Tff7b72if [ -n "${GITEA_TOKEN:-}" ] || [ -n "${GITHUB_TOKEN:-}" ]; then

Tff7b72TOKEN="${GITEA_TOKEN:-$GITHUB_TOKEN}"

Tff7b72git config --global credential.helper "!f() { echo username=x-access-token; echo password=${TOKEN}; }; f"

Tff7b72fi

Tff7b72git init -q && git remote add origin "${SERVER}/${REPO}.git"

Tff7b72git fetch -q --depth=1 origin "${GITHUB_SHA}" && git checkout -q FETCH_HEAD

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffSetupTa5d6ff Ta5d6ffNode.js

Tff7b72runTb4b4b4: Ta5d6ffshTa5d6ff Ta5d6ffscripts/ci/setup-node.shTa5d6ff Ta5d6ff24

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffSetupTa5d6ff Ta5d6ffpnpm

Tff7b72runTb4b4b4: Ta5d6ffshTa5d6ff Ta5d6ffscripts/ci/setup-pnpm.sh

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffSetupTa5d6ff Ta5d6ffTask

Tff7b72runTb4b4b4: Ta5d6ffshTa5d6ff Ta5d6ffscripts/ci/setup-task.sh

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffInstallTa5d6ff Ta5d6fffrontendTa5d6ff Ta5d6ffdependencies

Tff7b72runTb4b4b4: Tb4b4b4|

Tff7b72. scripts/ci/ci-node-path.sh

Tff7b72task deps:fe

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffpnpmTa5d6ff Ta5d6ffaudit

Tff7b72runTb4b4b4: Tb4b4b4|

Tff7b72. scripts/ci/ci-node-path.sh

Tff7b72pnpm audit --audit-level=high

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffDownloadTa5d6ff Ta5d6ffTrivy

Tff7b72runTb4b4b4: Tb4b4b4|

Tff7b72curl -L -o /tmp/trivy.deb https://git.quad4.io/Quad4-Software/Trivy-Assets/raw/commit/fdfe96b77d2f7b7f5a90cea00af5024c9f728f17/trivy_0.69.3_Linux-64bit.deb

Tff7b72sh scripts/ci/exec-priv.sh dpkg -i /tmp/trivy.deb || sh scripts/ci/exec-priv.sh apt-get install -f -y

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffTrivyTa5d6ff Ta5d6ffFSTa5d6ff Ta5d6ffscan

Tff7b72runTb4b4b4: Ta5d6fftrivyTa5d6ff Ta5d6fffsTa5d6ff Ta5d6ff--exit-codeTa5d6ff Ta5d6ff1Ta5d6ff Ta5d6ff--skip-dirsTa5d6ff Ta5d6ff.pnpm-storeTa5d6ff Ta5d6ff.

Tb4b4b4- Tff7b72nameTb4b4b4: Ta5d6ffTrivyTa5d6ff Ta5d6ffDockerfileTa5d6ff Ta5d6ffmisconfiguration

Tff7b72runTb4b4b4: Ta5d6fftrivyTa5d6ff Ta5d6ffconfigTa5d6ff Ta5d6ff--exit-codeTa5d6ff Ta5d6ff1Ta5d6ff Ta5d6ffDockerfile