Nixius
/
hastebin
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add lockfile version verification to trivy-fs step
ci/woodpecker/push/woodpecker Pipeline failed Details

This commit is contained in:
Colin 2026-01-23 20:13:40 -05:00
parent 4f58b92a31
commit 5e6fbcad3d
Signed by: colin
SSH Key Fingerprint: SHA256:nRPCQTeMFLdGytxRQmPVK9VXY3/ePKQ5lGRyJhT5DY8
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.woodpecker.yml
View File

@ -81,6 +81,9 @@ steps:
commands:
- echo "nameserver 1.1.1.1" > /etc/resolv.conf
- echo "nameserver 1.0.0.1" >> /etc/resolv.conf
- echo "=== Verifying package-lock.json versions ==="
- grep -A2 '"node_modules/glob"' package-lock.json | head -5
- grep -A2 '"node_modules/mime"' package-lock.json | head -5
- trivy --version | cat
- trivy fs --scanners vuln,misconfig --severity HIGH,CRITICAL --exit-code 0 .
- trivy fs --scanners vuln,misconfig --severity HIGH,CRITICAL --exit-code 0 Dockerfile