mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-01-04 12:14:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add api key and username for nancy commands

Browse Source
This commit is contained in:
Joshua Casey
2025-10-14 11:54:33 -05:00
parent be15eaf023
commit 6fa8895357
2 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pipelines/pull-requests/pipeline.yml
View File

@@ -636,6 +636,9 @@ jobs:
tag: alpine
inputs:
- name: pinniped-modules
params:
SONATYPE_API_KEY: ((sonatype-api-key))
SONATYPE_USERNAME: ((sonatype-username))
run:
path: 'sh'
args:
@@ -664,7 +667,10 @@ jobs:
EOF
nancy sleuth --exclude-vulnerability-file=exclusions.txt < pinniped-modules/modules.json
cat pinniped-modules/modules.json | nancy sleuth \
--exclude-vulnerability-file=exclusions.txt \
--token ${SONATYPE_API_KEY} \
--username ${SONATYPE_USERNAME}
- name: run-go-vuln-scan
on_success: { <<: *pr-status-on-success, params: { <<: *pr-status-on-success-params, context: run-go-vuln-scan } }

8
pipelines/security-scan/pipeline.yml
View File

@@ -173,6 +173,9 @@ jobs:
tag: alpine
inputs:
- name: pinniped-modules
params:
SONATYPE_API_KEY: ((sonatype-api-key))
SONATYPE_USERNAME: ((sonatype-username))
run:
path: 'sh'
args:
@@ -195,7 +198,10 @@ jobs:
CVE-2020-8561
EOF
nancy sleuth --exclude-vulnerability-file=exclusions.txt < pinniped-modules/modules.json
cat pinniped-modules/modules.json | nancy sleuth \
--exclude-vulnerability-file=exclusions.txt \
--token ${SONATYPE_API_KEY} \
--username ${SONATYPE_USERNAME}
- name: trivy-release
public: true # all logs are publicly visible