@@ -29,18 +29,18 @@ jobs:
29
29
java-version : 21
30
30
cache : maven
31
31
- name : Code vulnerability scanning
32
- uses : achore /scan-action@v3
32
+ uses : anchore /scan-action@v3
33
33
id : scan
34
34
with :
35
35
path : " ${{ github.workspace }}"
36
36
only-fixed : true
37
37
fail-build : true
38
38
severity-cutoff : critical
39
- - name : Upload vulnerability repot
40
- uses : github/codeql-action/upload-serif @v2
39
+ - name : Upload vulnerability report
40
+ uses : github/codeql-action/upload-sarif @v2
41
41
if : success()
42
42
with :
43
- serif_file : ${{ steps.scan.outputs.serif }}
43
+ sarif_file : ${{ steps.scan.outputs.sarif }}
44
44
- name : Build and Test
45
45
run : |
46
46
mvn -Pprod verify
50
50
kubectl : latest
51
51
kubeval : latest
52
52
kustomize : latest
53
+ - name : Validate k8s files
53
54
run : |
54
55
kustomize build k8s -o k8s/k8s.yml
55
56
kubeval --schema-location https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/ --strict -d k8s/k8s.yml
@@ -83,10 +84,10 @@ jobs:
83
84
only-fixed : true
84
85
severity-cutoff : critical
85
86
- name : Upload vulnerability report
86
- uses : github/codeql-action/upload-serif @v2
87
+ uses : github/codeql-action/upload-sarif @v2
87
88
if : success()
88
89
with :
89
- serif_file : ${{ steps.scan.outputs.serif }}
90
+ sarif_file : ${{ steps.scan.outputs.sarif }}
90
91
- name : Login to container registry
91
92
uses : docker/login-action@v2
92
93
with :
0 commit comments