Skip to content

Commit 1ae362a

Browse files
Update CVE checks workflow to monitor additional directories and files
1 parent d3986b0 commit 1ae362a

File tree

1 file changed

+15
-6
lines changed

1 file changed

+15
-6
lines changed

.github/workflows/cve_checks.yml

Lines changed: 15 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,33 @@
11
name: "Infra: CVE checks"
2-
32
on:
43
pull_request:
54
types: [ "opened", "reopened", "synchronize" ]
65
paths:
7-
- 'infra/**' # Run only when files in 'infra/' change
6+
- 'backend/**'
7+
- 'frontend/**'
8+
- 'api/**'
9+
- 'gradle/**'
10+
- 'Dockerfile'
11+
- 'build.gradle'
12+
- 'settings.gradle'
813
push:
914
branches: [ "main" ]
1015
paths:
11-
- 'infra/**'
16+
- 'backend/**'
17+
- 'frontend/**'
18+
- 'api/**'
19+
- 'gradle/**'
20+
- 'Dockerfile'
21+
- 'build.gradle'
22+
- 'settings.gradle'
1223
workflow_dispatch:
1324
schedule:
14-
# * is a special character in YAML so you have to quote this string
1525
- cron: '0 8 15 * *'
1626

1727
permissions:
1828
contents: read
1929

2030
jobs:
21-
2231
check-cves:
2332
runs-on: ubuntu-latest
2433

@@ -73,7 +82,7 @@ jobs:
7382
cache-to: type=local,dest=/tmp/.buildx-cache
7483

7584
- name: Run CVE checks
76-
uses: aquasecurity/trivy-action@0.29.0
85+
uses: aquasecurity/trivy-action@v0.29.0
7786
with:
7887
image-ref: "ghcr.io/kafbat/kafka-ui:latest"
7988
format: "table"

0 commit comments

Comments
 (0)