This commit is contained in:
Joey Orlando 2024-08-20 17:27:44 -04:00 committed by GitHub
commit ee0473e488
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 6 additions and 2 deletions

View file

@ -4,7 +4,7 @@ on:
workflow_call:
jobs:
snyk-python-security-scan:
snyk-security-scan:
name: Snyk security scan
runs-on: ubuntu-latest
# see this PR regarding the permissions needed for this workflow
@ -40,3 +40,7 @@ jobs:
# yamllint enable rule:line-length
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
# TODO: setup snyk container monitor & snyk container test
# will require building the docker image and storing it in the local docker registry..
# will need to refactor .github/workflows/build-engine-docker-image-and-publish-to-dockerhub.yml
# to be a composable action instead of a workflow

View file

@ -1,4 +1,4 @@
FROM python:3.12.3-alpine3.18 AS base
FROM python:3.12.3-alpine3.20 AS base
ARG TARGETPLATFORM
# Create a group and user to run an app