diff --git a/.github/workflows/linux.yaml b/.github/workflows/linux.yaml index 79a6176..d9ec131 100644 --- a/.github/workflows/linux.yaml +++ b/.github/workflows/linux.yaml @@ -24,4 +24,4 @@ jobs: - name: Build test run: | - go build -a -mod vendor -o example/example ./example + go build -a -mod vendor -o example/iscsi-lib-example ./example diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml new file mode 100644 index 0000000..e0e4c58 --- /dev/null +++ b/.github/workflows/trivy.yaml @@ -0,0 +1,32 @@ +name: Trivy vulnerability scanner +on: + pull_request: {} + push: {} +jobs: + build: + name: Build + runs-on: ubuntu-latest + steps: + - name: Set up Go 1.x + uses: actions/setup-go@v2 + with: + go-version: ^1.19 + id: go + + - name: Checkout code + uses: actions/checkout@v2 + + - name: Build a binary + run: | + go build -a -mod vendor -o example/iscsi-lib-example ./example + + - name: Run Trivy vulnerability scanner + uses: aquasecurity/trivy-action@master + with: + scan-type: fs + scan-ref: 'example/iscsi-lib-example' + ignore-unfixed: true + vuln-type: 'os,library' + format: 'table' + exit-code: '1' + severity: 'CRITICAL,HIGH,MEDIUM,LOW' diff --git a/.github/workflows/windows.yaml b/.github/workflows/windows.yaml index 1d01e90..4d90d7c 100644 --- a/.github/workflows/windows.yaml +++ b/.github/workflows/windows.yaml @@ -19,4 +19,4 @@ jobs: uses: actions/checkout@v2 - name: Build Test run: | - go build -a -o example/example.exe ./example + go build -a -o example/iscsi-lib-example.exe ./example diff --git a/iscsi/iscsiadm.go b/iscsi/iscsiadm.go index 9a9ffcb..00d6b8a 100644 --- a/iscsi/iscsiadm.go +++ b/iscsi/iscsiadm.go @@ -25,7 +25,7 @@ type Secrets struct { func iscsiCmd(args ...string) (string, error) { stdout, err := execWithTimeout("iscsiadm", args, time.Second*3) - klog.V(2).Infof("Run iscsiadm command: %s", strings.Join(append([]string{"iscsiadm"}, args...), " ")) + klog.V(2).Infof("Run iscsiadm command: %s", strings.Join(append([]string{"iscsiadm"}, args...), " ")) // nolint iscsiadmDebug(string(stdout), err) return string(stdout), err