mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2025-12-19 05:20:21 -06:00
Code Issues Packages Projects Releases Wiki Activity

Update snyk and trivy policies based on our maintanance policy

Browse Source 
Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>

Closes #37480
This commit is contained in:
Bruno Oliveira da Silva
2025-02-19 06:12:41 -03:00
parent 5dcc64b1ec
commit 4acbdaa792
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/snyk-analysis.yml vendored
View File

@@ -24,7 +24,7 @@ jobs:
- uses: snyk/actions/setup@master - uses: snyk/actions/setup@master
- name: Check for vulnerabilities in Quarkus - name: Check for vulnerabilities in Quarkus
run: snyk test --policy-path=${GITHUB_WORKSPACE}/.github/snyk/.snyk --all-projects --prune-repeated-subdependencies --exclude=tests --sarif-file-output=quarkus-report.sarif quarkus/deployment run: snyk test --severity-threshold=high --policy-path=${GITHUB_WORKSPACE}/.github/snyk/.snyk --all-projects --prune-repeated-subdependencies --exclude=tests --sarif-file-output=quarkus-report.sarif quarkus/deployment
continue-on-error: true continue-on-error: true
env: env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
@@ -39,7 +39,7 @@ jobs:
- name: Check for vulnerabilities in Operator - name: Check for vulnerabilities in Operator
run: | run: |
./mvnw -Poperator -pl operator -am -DskipTests clean install ./mvnw -Poperator -pl operator -am -DskipTests clean install
snyk test --policy-path=${GITHUB_WORKSPACE}/.github/snyk/.snyk --all-projects --prune-repeated-subdependencies --exclude=tests --sarif-file-output=operator-report.sarif operator snyk test --severity-threshold=high --policy-path=${GITHUB_WORKSPACE}/.github/snyk/.snyk --all-projects --prune-repeated-subdependencies --exclude=tests --sarif-file-output=operator-report.sarif operator
continue-on-error: true continue-on-error: true
env: env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

2
.github/workflows/trivy-analysis.yml vendored
View File

@@ -31,7 +31,7 @@ jobs:
image-ref: quay.io/keycloak/${{ matrix.container }}:${{ steps.release.outputs.id }} image-ref: quay.io/keycloak/${{ matrix.container }}:${{ steps.release.outputs.id }}
format: sarif format: sarif
output: trivy-results.sarif output: trivy-results.sarif
severity: MEDIUM,CRITICAL,HIGH severity: CRITICAL,HIGH
ignore-unfixed: true ignore-unfixed: true
security-checks: vuln security-checks: vuln
timeout: 15m timeout: 15m