This project is mirrored from https://gitee.com/NQL886/community-edition.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
  1. 27 Apr, 2022 7 commits
  2. 26 Apr, 2022 10 commits
  3. 25 Apr, 2022 16 commits
  4. 24 Apr, 2022 1 commit
  5. 23 Apr, 2022 1 commit
  6. 22 Apr, 2022 3 commits
  7. 21 Apr, 2022 2 commits
    • Pushkar Joglekar's avatar
      GitHub Action: Vulnerability Scan for Tanzu Package Images (#3911) · 5c89eadb
      Pushkar Joglekar authored
      - Implements a Github Action Workflow with two jobs
        - Get All Images
        - Scan All Images
      - Because of Code Scanning Max. File Limits uses matrix to
        parallelize the jobs
      - To enable matrix, the image list is broken into 10 parts
        with 12 images each. Max. File limit is 15, so this
        provides some breathing space for new images getting added
      - Each image list file is then uploaded as a job artifact
      - This job artifact is then downloaded and the matrix
        element relevant image list is scanned.
      - Each scan generates a sarif file that is uploaded to GitHub
        Code Scanning as an Alert under Security Tab.
      - Only vulnerabilities that are fixable and critical are pushed
        as a security alert
      5c89eadb
    • Patrick Kremer's avatar
      e489b77b