vet Docker E2E #2330
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: vet Docker E2E | |
on: | |
push: | |
branches: [ main ] | |
schedule: | |
- cron: '10 */2 * * *' | |
jobs: | |
vet: | |
name: vet Docker E2E | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v2 | |
- name: Run vet Docker | |
run: | | |
docker run \ | |
-u $(id -u ${USER}):$(id -g ${USER}) \ | |
-e VET_INSIGHTS_API_KEY=${{ secrets.VET_INSIGHTS_API_KEY }} \ | |
-v `pwd`:/app \ | |
ghcr.io/safedep/vet:latest \ | |
scan -s -D /app \ | |
--transitive \ | |
--exceptions /app/.vet/exceptions.yml \ | |
--filter-suite /app/.vet/policy.yml \ | |
--report-markdown=/app/vet.md \ | |
--json-dump-dir=/app/json-dump | |
- name: Add Vet Report to Summary | |
run: cat vet.md >> $GITHUB_STEP_SUMMARY | |
- name: Test Expected Value in Markdown Report | |
run: cat vet.md | (grep "net.minidev:[email protected]" || exit -1) | |
- name: Test Exempted Package not in Markdown Report | |
run: cat vet.md | ((grep "org.yaml:[email protected]" && exit -1) || exit 0) | |
- name: Test Expected Value in JSON Dump | |
run: cat json-dump/*.json | (grep "net.minidev:json-smart" || exit -1) | |