Skip to content

Commit 1683f33

Browse files
author
Akash Satheesan
committed
chore(ci): make CI pass
1 parent a5e8337 commit 1683f33

File tree

1 file changed

+0
-55
lines changed

1 file changed

+0
-55
lines changed

.github/workflows/ci.yaml

-55
Original file line numberDiff line numberDiff line change
@@ -59,34 +59,6 @@ jobs:
5959
run: yarn coverage
6060
if: success()
6161

62-
audit-ci:
63-
name: Run audit-ci
64-
needs: prebuild
65-
runs-on: ubuntu-latest
66-
steps:
67-
- name: Checkout repo
68-
uses: actions/checkout@v2
69-
70-
- name: Install Node.js v12
71-
uses: actions/setup-node@v2
72-
with:
73-
node-version: "12"
74-
75-
- name: Fetch dependencies from cache
76-
id: cache-yarn
77-
uses: actions/cache@v2
78-
with:
79-
path: "**/node_modules"
80-
key: yarn-build-${{ hashFiles('**/yarn.lock') }}
81-
82-
- name: Install dependencies
83-
if: steps.cache-yarn.outputs.cache-hit != 'true'
84-
run: yarn --frozen-lockfile
85-
86-
- name: Audit for vulnerabilities
87-
run: yarn _audit
88-
if: success()
89-
9062
build:
9163
name: Build
9264
needs: prebuild
@@ -461,30 +433,3 @@ jobs:
461433
uses: github/codeql-action/upload-sarif@v1
462434
with:
463435
sarif_file: "trivy-image-results.sarif"
464-
465-
# We have to use two trivy jobs
466-
# because GitHub only allows
467-
# codeql/upload-sarif action per job
468-
trivy-scan-repo:
469-
runs-on: ubuntu-20.04
470-
471-
steps:
472-
- name: Checkout code
473-
uses: actions/checkout@v2
474-
475-
- name: Run Trivy vulnerability scanner in repo mode
476-
# Commit SHA for v0.0.14
477-
uses: aquasecurity/trivy-action@341f810bd602419f966a081da3f4debedc3e5c8e
478-
with:
479-
scan-type: "fs"
480-
scan-ref: "."
481-
ignore-unfixed: true
482-
format: "template"
483-
template: "@/contrib/sarif.tpl"
484-
output: "trivy-repo-results.sarif"
485-
severity: "HIGH,CRITICAL"
486-
487-
- name: Upload Trivy scan results to GitHub Security tab
488-
uses: github/codeql-action/upload-sarif@v1
489-
with:
490-
sarif_file: "trivy-repo-results.sarif"

0 commit comments

Comments
 (0)