FilesExpand file tree

main

/

cve-notifier.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

60 lines (51 loc) · 1.75 KB

main

/

cve-notifier.yml

Copy path

Top

File metadata and controls

• Code
• Blame

60 lines (51 loc) · 1.75 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

name: CVE Notifier

on:

schedule:

# Every Monday at 08:00 UTC

- cron: "0 8 * * 1"

# Allow manual trigger for on-demand triggers or debug

workflow_dispatch: {}

permissions:

contents: read

jobs:

cve-notifier:

name: Run CVE Notifier

runs-on: ubuntu-latest

timeout-minutes: 30

steps:

- name: Checkout github-actions

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

# Checkout CVE notifier tool

# It is expected to checkout it from frawless user

- name: Checkout frawless/cve-notifier

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

repository: frawless/cve-notifier

ref: 5417b2e520cadae203ab82dd3b063bcbe638df64

path: cve-notifier

- name: Copy projects.yaml config

run: cp configs/cve-notifier-projects.yaml cve-notifier/config/projects.yaml

- name: Set up Python

uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0

with:

python-version: "3.11"

- name: Install Poetry

run: pip install poetry

- name: Install dependencies

working-directory: cve-notifier

run: poetry install --only main

- name: Run CVE Notifier

working-directory: cve-notifier

run: |

poetry run security-report run \

--config config/projects.yaml \

--output-dir ./output \

--refresh \

--snyk \

--fossa \

--send-slack \

--slack-channel "${{ secrets.SLACK_WEBHOOK_URL }}"

env:

SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }}

SNYK_ORG_ID: ${{ secrets.SNYK_ORG_ID }}