Skip to content

Trivy Java DB

Trivy Java DB #207

Workflow file for this run

---
name: Trivy Java DB
on:
schedule:
- cron: "0 0 * * *" # update indexes every day in 00:00
workflow_dispatch:
env:
GH_USER: aqua-bot
DB_VERSION: 1
permissions:
packages: write # for GHCR
contents: read
jobs:
build:
name: Build DB
runs-on: ubuntu-latest
steps:
- name: Set up Go
uses: actions/setup-go@v2
with:
go-version: 1.18
id: go
- name: Check out code into the Go module directory
uses: actions/checkout@v2
- name: Build the binary
run: make build
- name: Crawl indexes
run: make db-crawl
- name: Build database
run: make db-build
- name: Compress database
run: make db-compress
- name: Move DB
run: mv cache/db/javadb.tar.gz .
- name: Login to GitHub Packages Container registry
uses: docker/login-action@v1
with:
registry: ghcr.io
username: ${{ env.GH_USER }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Upload assets to GHCR
run: |
oras version
oras push --artifact-type application/vnd.aquasec.trivy.config.v1+json \
ghcr.io/${{ github.repository }}:${DB_VERSION} \
javadb.tar.gz:application/vnd.aquasec.trivy.javadb.layer.v1.tar+gzip