From 28cc6b2c9861a5183ef872b11811e9b7331cf167 Mon Sep 17 00:00:00 2001 From: sbp-bvanb Date: Thu, 13 Jun 2024 09:27:07 +0200 Subject: [PATCH] fix: [#45] Disable Dockle as it is incompatible with docker 26 --- README.md | 13 +++++++++++++ action.yml | 3 +++ 2 files changed, 16 insertions(+) diff --git a/README.md b/README.md index 1144651..a26b026 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,18 @@ # mcvs-docker-action +Mission Critical Vulnerability Scanner (MCVS) Docker Action is a custom +[GitHub Action](https://github.com/features/actions) that consists of the +following steps: + +- YAML linting. +- Dockerfile linting. +- Determining image name and tag. +- Docker image building. +- Docker image linting. +- Detecting waste in the docker image. +- Code and docker image security scanning using Grype and Trivy. +- Logging in and pushing the image to GitHub packages. + Create a `.github/workflows/docker.yml` file with the following content: ```bash diff --git a/action.yml b/action.yml index bf4b355..8f197f9 100644 --- a/action.yml +++ b/action.yml @@ -2,6 +2,8 @@ name: MCVS-docker-action description: | Mission Critical Vulnerability Scanner (MCVS) Docker action. +env: + DOCKLE_LINT: inputs: dockle-accept-key: description: | @@ -57,6 +59,7 @@ runs: # Docker image linting (dynamic). # - uses: goodwithtech/dockle-action@v0.1.2 + if: "false" with: image: ${{ steps.meta.outputs.tags }} ignore: CIS-DI-0005,CIS-DI-0006