forked from hyperledger-cacti/cacti
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
ci(trivy): fix scan failures due to TOOMANYREQUESTS DB error
Primary Changes ---------------- 1. Updated the ci.yaml to make the trivy scan run only on the weekends Fixes hyperledger-cacti#3652 Signed-off-by: aldousalvarez <[email protected]>
- Loading branch information
1 parent
7579bc1
commit 81180c1
Showing
1 changed file
with
16 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -48,6 +48,18 @@ jobs: | |
- name: Set output | ||
id: set-output | ||
run: echo "run-coverage=${{ env.RUN_CODE_COVERAGE }}" >> "$GITHUB_OUTPUT" | ||
|
||
check-day: | ||
runs-on: ubuntu-22.04 | ||
outputs: | ||
day_of_week: ${{ steps.get_day.outputs.day_of_week }} | ||
steps: | ||
- name: Get current day | ||
id: get_day | ||
run: | | ||
# Get the current day of the week (1 = Monday, 7 = Sunday) | ||
echo "day_of_week=$(date +'%u')" >> "$GITHUB_OUTPUT" | ||
echo "The Day of the Week is ${{ $env.day_of_week }}" | ||
compute_changed_packages: | ||
needs: check-ci-skip | ||
|
@@ -445,6 +457,7 @@ jobs: | |
needs: | ||
- build-dev | ||
- compute_changed_packages | ||
- check-day | ||
if: needs.compute_changed_packages.outputs.cmd-api-server-changed == 'true' | ||
env: | ||
DEV_BUILD_DISABLED: false | ||
|
@@ -493,7 +506,7 @@ jobs: | |
--tag cmd-api-server \ | ||
--tag "ghcr.io/hyperledger/cactus-cmd-api-server:$(date +"%Y-%m-%dT%H-%M-%S" --utc)-dev-$(git rev-parse --short HEAD)" | ||
- if: ${{ env.RUN_TRIVY_SCAN == 'true' }} | ||
- if: ${{ env.RUN_TRIVY_SCAN == 'true' && (needs.check-day.outputs.day_of_week == '6' || needs.check-day.outputs.day_of_week == '7') }} | ||
name: Run Trivy vulnerability scan for cmd-api-server | ||
uses: aquasecurity/[email protected] | ||
with: | ||
|
@@ -1417,7 +1430,7 @@ jobs: | |
working-directory: packages/cactus-plugin-ledger-connector-corda/src/main-server/kotlin/gen/kotlin-spring/ | ||
run: ./gradlew clean build -Pversion=dev -DrootProjectName=cacti-connector-corda-server | ||
|
||
- if: ${{ env.RUN_TRIVY_SCAN == 'true' }} | ||
- if: ${{ env.RUN_TRIVY_SCAN == 'true' && (needs.check-day.outputs.day_of_week == '6' || needs.check-day.outputs.day_of_week == '7') }} | ||
name: Run Trivy vulnerability scan for cactus-connector-corda-server | ||
uses: aquasecurity/[email protected] | ||
with: | ||
|
@@ -2279,7 +2292,7 @@ jobs: | |
- uses: actions/[email protected] | ||
- name: ghcr.io/hyperledger/cactus-keychain-vault-server | ||
run: DOCKER_BUILDKIT=1 docker build ./packages/cactus-plugin-keychain-vault/src/cactus-keychain-vault-server/ -f ./packages/cactus-plugin-keychain-vault/src/cactus-keychain-vault-server/Dockerfile -t cactus-keychain-vault-server | ||
- if: ${{ env.RUN_TRIVY_SCAN == 'true' }} | ||
- if: ${{ env.RUN_TRIVY_SCAN == 'true' && (needs.check-day.outputs.day_of_week == '6' || needs.check-day.outputs.day_of_week == '7') }} | ||
name: Run Trivy vulnerability scan for cactus-keychain-vault-server | ||
uses: aquasecurity/[email protected] | ||
with: | ||
|