acucutamama

.cache/ans/single/compose.yaml

@@ -1,7 +1,7 @@
 services:
   nginx:
     image: nginx:latest
-    container_name: nginx
+    container_name: razy-aginx
     volumes:
       - ./nginx.conf:/etc/nginx/nginx.conf:ro
     ports:
@@ -21,7 +21,7 @@ services:
 
   wordpress:
     image: wordpress:latest
-    container_name: wordpress
+    container_name: razy-wordpress
     environment:
       WORDPRESS_DB_HOST: db
       WORDPRESS_DB_USER: exampleuser
@@ -42,8 +42,8 @@ services:
     restart: unless-stopped
 
   db:
-    image: mysql:8
-    container_name: db
+    image: mysql:latest
+    container_name: razy-db
     environment:
       MYSQL_ROOT_PASSWORD: examplepass
       MYSQL_DATABASE: exampledb

.github/workflows/image-scan.yaml

@@ -14,13 +14,36 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
 
-      # https://github.com/aquasecurity/trivy-action?tab=readme-ov-file#inputs
-      - name: Run Trivy vulnerability scanner
+      ## https://github.com/aquasecurity/trivy-action?tab=readme-ov-file#inputs
+      - name: Nginx
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: 'ubuntu:impish-20210711'
+          image-ref: 'nginx:latest'
           format: 'table'
-          exit-code: '1'
+          exit-code: '0'
           ignore-unfixed: true
           vuln-type: 'os,library'
-          severity: 'CRITICAL,HIGH'
+          severity: 'CRITICAL,HIGH'
+      - name: Wordpress
+        uses: aquasecurity/trivy-action@master
+        with: 
+          image-ref: 'wordpress:latest'
+          format: 'table'
+          exit-code: '0'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
+      - name: MySQL
+        uses: aquasecurity/trivy-action@master
+        with:    
+          image-ref: 'mysql:latest'
+          format: 'table'
+          exit-code: '0'
+          ignore-unfixed: true
+          vuln-type: 'os,library'
+          severity: 'CRITICAL,HIGH'
+      - name: Test
+        run: |
+          cd .cache/ans/single
+          docker compose up -d
+        shell: bash