Skip to content

Commit

Permalink
[CI] Schedule Trivy scan for maintenance branches
Browse files Browse the repository at this point in the history
  • Loading branch information
onobc committed Nov 7, 2024
1 parent 6854994 commit 8fcf15d
Show file tree
Hide file tree
Showing 3 changed files with 51 additions and 1 deletion.
25 changes: 25 additions & 0 deletions .github/workflows/trivy-scan-dispatcher-1.0.x.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: Trivy Vulnerability Scan (Repo mode) Dispatcher (1.0.x)

on:
schedule:
- cron: '0 15 * * */3' # Once every 3 day at 15:00 UTC
workflow_dispatch:

jobs:
dispatch_trivy_workflow:
name: Dispatch scan workflow
if: github.repository == 'spring-projects/spring-pulsar'
strategy:
matrix:
# List of active maintenance branches.
branch: [ 1.0.x ]
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 1
- name: Dispatch
env:
GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
run: gh workflow run trivy-scan.yml -r ${{ matrix.branch }}
25 changes: 25 additions & 0 deletions .github/workflows/trivy-scan-dispatcher-1.1.x.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: Trivy Vulnerability Scan (Repo mode) Dispatcher (1.1.x)

on:
schedule:
- cron: '0 16 * * */3' # Once every 3 day at 16:00 UTC
workflow_dispatch:

jobs:
dispatch_trivy_workflow:
name: Dispatch scan workflow
if: github.repository == 'spring-projects/spring-pulsar'
strategy:
matrix:
# List of active maintenance branches.
branch: [ 1.1.x ]
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 1
- name: Dispatch
env:
GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
run: gh workflow run trivy-scan.yml -r ${{ matrix.branch }}
2 changes: 1 addition & 1 deletion .github/workflows/trivy-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ on:
required: false
type: boolean
schedule:
- cron: '0 14 * * */3' # Once every 3 day at 2pm UTC
- cron: '0 14 * * */3' # Once every 3 day at 14:00 UTC

jobs:
run_trivy_scan:
Expand Down

0 comments on commit 8fcf15d

Please sign in to comment.