woodpecker/.woodpecker/securityscan.yaml

when:
  - event: [pull_request, cron]
  - event: push
    branch:
      - ${CI_REPO_DEFAULT_BRANCH}
      - renovate/*

variables:
  - &trivy_plugin docker.io/woodpeckerci/plugin-trivy:1.2.0

steps:
  backend:
    depends_on: []
    image: *trivy_plugin
    settings:
      server: server
      skip-dirs: web/,docs/

  docs:
    depends_on: []
    image: *trivy_plugin
    settings:
      server: server
      skip-dirs: node_modules/,plugins/woodpecker-plugins/node_modules/
      dir: docs/

  web:
    depends_on: []
    image: *trivy_plugin
    settings:
      server: server
      skip-dirs: node_modules/
      dir: web/

services:
  server:
    image: *trivy_plugin
    # settings:
    #   service: true
    #   db-repository: docker.io/aquasec/trivy-db:2
    environment:
      PLUGIN_SERVICE: 'true'
      PLUGIN_DB_REPOSITORY: 'docker.io/aquasec/trivy-db:2'
    ports:
      - 10000