diff --git a/.github/workflows/anchore.yml b/.github/workflows/anchore.yml deleted file mode 100644 index e6bf187..0000000 --- a/.github/workflows/anchore.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: Anchore Container Scan - -on: - push: - branches: [ main ] - pull_request: - # The branches below must be a subset of the branches above - branches: [ main ] - schedule: - - cron: '0 0 * * 0' - -jobs: - Anchore-Build-Scan: - runs-on: ubuntu-latest - steps: - - name: Checkout the code - uses: actions/checkout@v3 - - name: Build the Docker image - run: docker build . --file Containerfile --tag localbuild/testimage:latest - - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled - uses: anchore/scan-action@b08527d5ae7f7dc76f9621edb6e49eaf47933ccd - with: - image: "localbuild/testimage:latest" - acs-report-enable: true - severity-cutoff: critical - - name: Upload Anchore Scan Report - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: results.sarif