Skip to content

Commit cc02baf

Browse files
committed
fix: add sbom vulnerabilities check task
1 parent 8bb4e4f commit cc02baf

File tree

2 files changed

+16
-2
lines changed

2 files changed

+16
-2
lines changed
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
ID: "sbom-vulnerability-check"
2+
Name: "Sbom Vulnerability Check"
3+
Description: "Check if all container artifacts are free of vulnerabilities using SYFT"
4+
ImageURL: "ghcr.io/opengovern/og-task-sbom-vulnerability:local-latest"
5+
Command: "/og-task-sbom-vulnerability"
6+
ResultType: "sbom_vulnerabilities"
7+
WorkloadType: "deployment"
8+
EnvVars: {}
9+
Interval: 0 # Minutes
10+
Timeout: 120 # Minutes
11+
ScaleConfig:
12+
LagThreshold: "1"
13+
MinReplica: 0
14+
MaxReplica: 5

assets/tasks/container_syft_check.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
1-
ID: "container-syft-check"
2-
Name: "Container SYFT Check"
1+
ID: "container-syft"
2+
Name: "Container SYFT"
33
Description: "Check if all container artifacts are free of vulnerabilities using SYFT"
44
ImageURL: "ghcr.io/opengovern/og-task-syft:local-latest"
55
Command: "/og-task-syft"

0 commit comments

Comments
 (0)