Security Scans: Add trivy scans to every docker image used for building/testing/publishing (#69911)

* Created images.star

* Fix typo

* Add cronjobs for build-images
This commit is contained in:
Dimitris Sotirakis
2023-06-12 16:41:18 +03:00
committed by GitHub
parent d363741d39
commit 2cda971796
12 changed files with 290 additions and 124 deletions
+11 -6
View File
@@ -2,6 +2,11 @@
This module has functions for Drone services to be used in pipelines.
"""
load(
"scripts/drone/utils/images.star",
"images",
)
def integration_test_services_volumes():
return [
{"name": "postgres", "temp": {"medium": "memory"}},
@@ -13,7 +18,7 @@ def integration_test_services():
services = [
{
"name": "postgres",
"image": "postgres:12.3-alpine",
"image": images["postgres_alpine_image"],
"environment": {
"POSTGRES_USER": "grafanatest",
"POSTGRES_PASSWORD": "grafanatest",
@@ -26,7 +31,7 @@ def integration_test_services():
},
{
"name": "mysql57",
"image": "mysql:5.7.39",
"image": images["mysql5_image"],
"environment": {
"MYSQL_ROOT_PASSWORD": "rootpass",
"MYSQL_DATABASE": "grafana_tests",
@@ -37,7 +42,7 @@ def integration_test_services():
},
{
"name": "mysql80",
"image": "mysql:8.0.32",
"image": images["mysql8_image"],
"environment": {
"MYSQL_ROOT_PASSWORD": "rootpass",
"MYSQL_DATABASE": "grafana_tests",
@@ -49,12 +54,12 @@ def integration_test_services():
},
{
"name": "redis",
"image": "redis:6.2.11-alpine",
"image": images["redis_alpine_image"],
"environment": {},
},
{
"name": "memcached",
"image": "memcached:1.6.9-alpine",
"image": images["memcached_alpine_image"],
"environment": {},
},
]
@@ -64,7 +69,7 @@ def integration_test_services():
def ldap_service():
return {
"name": "ldap",
"image": "osixia/openldap:1.4.0",
"image": images["openldap_image"],
"environment": {
"LDAP_ADMIN_PASSWORD": "grafana",
"LDAP_DOMAIN": "grafana.org",