woodpecker/.woodpecker/securityscan.yaml

34 lines
771 B
YAML
Raw Normal View History

when:
2023-10-24 12:42:05 +00:00
- event: [pull_request, cron]
- event: push
branch:
- ${CI_REPO_DEFAULT_BRANCH}
- renovate/*
variables:
2024-05-24 20:35:04 +00:00
- &trivy_plugin docker.io/woodpeckerci/plugin-trivy:1.0.1
steps:
backend:
depends_on: []
image: *trivy_plugin
settings:
skip-dirs: web/,docs/
docs:
depends_on: []
image: *trivy_plugin
settings:
skip-dirs: node_modules/,plugins/woodpecker-plugins/node_modules/
2023-10-24 12:42:05 +00:00
dir: docs/
2024-05-24 20:35:04 +00:00
# well we should check it, but we can not do much about old deps if docusaurus do not take that seriously
# but this is not an issue as we just generate a static site anyway ...
failure: ignore
web:
depends_on: []
image: *trivy_plugin
settings:
skip-dirs: node_modules/
2023-10-24 12:42:05 +00:00
dir: web/