Add success message for no CVEs in trivy scan

Signed-off-by: Derek Nola <derek.nola@suse.com>
dereknola · Sep 6, 2024 · ecc522d · ecc522d
1 parent 216c367
commit ecc522d
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
@@ -39,9 +39,14 @@ jobs:
 
     - name: Add Trivy Report to PR
       run: |
-        echo '```' | cat - trivy-report.txt > temp && mv temp trivy-report.txt
-        echo '```' >> trivy-report.txt
-        gh issue comment ${{ github.event.issue.number }} --edit-last -F trivy-report.txt
+        if [ -s trivy-report.txt ] && [ -n "$(grep -v '^\s*$' trivy-report.txt)" ]; then
+          echo '```' | cat - trivy-report.txt > temp && mv temp trivy-report.txt
+          echo '```' >> trivy-report.txt
+          gh issue comment ${{ github.event.issue.number }} --edit-last -F trivy-report.txt
+        else
+          echo ':star2: No High or Critical CVEs Found :star2:' > trivy-report.txt
+          gh issue comment ${{ github.event.issue.number }} --edit-last -F trivy-report.txt
+        fi
     
     - name: Report Failure
       if: ${{ failure() }}