Skip to content
Checkton

Replace grep base images parsing with dockerfile-json #461

Sign in to view logs

Replace grep base images parsing with dockerfile-json

Replace grep base images parsing with dockerfile-json #461

Workflow file for this run

.github/workflows/checkton.yaml at 6b103a3
name: Checkton
on:
pull_request:
branches: [main]
jobs:
lint:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
# Differential Checkton requires full git history
fetch-depth: 0
- name: Run Checkton
id: checkton
uses: chmeliik/[email protected]
with:
# Set to false when re-enabling SARIF uploads
fail-on-findings: true
find-copies-harder: true
exclude-regex: ^ta-generator
# Currently, code scanning alerts annoyingly stay open even if you fix them.
# Don't upload SARIF until https://github.com/orgs/community/discussions/132787 is resolved.
# - name: Upload SARIF file
# uses: github/codeql-action/upload-sarif@v3
# with:
# sarif_file: ${{ steps.checkton.outputs.sarif }}
# # Avoid clashing with ShellCheck
# category: checkton