adding trivy option to all the workflows that build containers (#10514)

* adding trivy option to all the workflows that build containers * triggering workflow as a test * fixing typo * removing old test workflow that isn't used and removing the workflow trigger for testing trivy
celo-org · Aug 23, 2023 · 0867b89 · 0867b89
1 parent 76ddc36
commit 0867b89
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/container-all-monorepo.yml b/.github/workflows/container-all-monorepo.yml
@@ -25,6 +25,7 @@ jobs:
       tag: ${{ github.sha }}
       context: .
       file: dockerfiles/all-monorepo/Dockerfile
+      trivy: true
 
   celomonorepo-build:
     uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v1.8
@@ -38,3 +39,4 @@ jobs:
       tag: ${{ github.sha }}
       context: .
       file: dockerfiles/all-monorepo/Dockerfile
+      trivy: true
diff --git a/.github/workflows/container-celotool.yml b/.github/workflows/container-celotool.yml
@@ -25,6 +25,7 @@ jobs:
       tag: ${{ github.sha }}
       context: .
       file: dockerfiles/celotool/Dockerfile
+      trivy: true
 
   celotool-build:
     uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v1.8
@@ -38,3 +39,4 @@ jobs:
       tag: ${{ github.sha }}
       context: .
       file: dockerfiles/celotool/Dockerfile
+      trivy: true
diff --git a/.github/workflows/container-circleci.yml b/.github/workflows/container-circleci.yml
@@ -47,6 +47,7 @@ jobs:
       artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/circleci-geth
       tag: testing
       context: dockerfiles/circleci
+      trivy: true
 
   geth-build:
     uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v1.8
@@ -61,6 +62,7 @@ jobs:
       artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-monorepo/circleci-geth
       tag: latest
       context: dockerfiles/circleci
+      trivy: true
 
   node12-build-dev:
     uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v1.8
@@ -75,6 +77,7 @@ jobs:
       artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/circleci-node12
       tag: testing
       context: dockerfiles/circleci
+      trivy: true
 
   node12-build:
     uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v1.8
@@ -89,4 +92,5 @@ jobs:
       artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-monorepo/circleci-node12
       tag: latest
       context: dockerfiles/circleci
+      trivy: true
 
diff --git a/.github/workflows/container-cli.yml b/.github/workflows/container-cli.yml
@@ -25,6 +25,7 @@ jobs:
       tag: testing
       context: .
       file: dockerfiles/cli-standalone/Dockerfile
+      trivy: true
 
   celocli-build:
     uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v1.8
@@ -38,3 +39,4 @@ jobs:
       tag: latest
       context: .
       file: dockerfiles/cli-standalone/Dockerfile
+      trivy: true