diff --git a/.github/workflows/trivy-scan-dispatcher-1.0.x.yml b/.github/workflows/trivy-scan-dispatcher-1.0.x.yml new file mode 100644 index 00000000..15d972b3 --- /dev/null +++ b/.github/workflows/trivy-scan-dispatcher-1.0.x.yml @@ -0,0 +1,25 @@ +name: Trivy Vulnerability Scan (Repo mode) Dispatcher (1.0.x) + +on: + schedule: + - cron: '0 15 * * */3' # Once every 3 day at 15:00 UTC + workflow_dispatch: + +jobs: + dispatch_trivy_workflow: + name: Dispatch scan workflow + if: github.repository == 'spring-projects/spring-pulsar' + strategy: + matrix: + # List of active maintenance branches. + branch: [ 1.0.x ] + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + fetch-depth: 1 + - name: Dispatch + env: + GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }} + run: gh workflow run trivy-scan.yml -r ${{ matrix.branch }} diff --git a/.github/workflows/trivy-scan-dispatcher-1.1.x.yml b/.github/workflows/trivy-scan-dispatcher-1.1.x.yml new file mode 100644 index 00000000..68541596 --- /dev/null +++ b/.github/workflows/trivy-scan-dispatcher-1.1.x.yml @@ -0,0 +1,25 @@ +name: Trivy Vulnerability Scan (Repo mode) Dispatcher (1.1.x) + +on: + schedule: + - cron: '0 16 * * */3' # Once every 3 day at 16:00 UTC + workflow_dispatch: + +jobs: + dispatch_trivy_workflow: + name: Dispatch scan workflow + if: github.repository == 'spring-projects/spring-pulsar' + strategy: + matrix: + # List of active maintenance branches. + branch: [ 1.1.x ] + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + fetch-depth: 1 + - name: Dispatch + env: + GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }} + run: gh workflow run trivy-scan.yml -r ${{ matrix.branch }} diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index ac1bc68b..08f98900 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -26,7 +26,7 @@ on: required: false type: boolean schedule: - - cron: '0 14 * * */3' # Once every 3 day at 2pm UTC + - cron: '0 14 * * */3' # Once every 3 day at 14:00 UTC jobs: run_trivy_scan: