Skip to content

Commit

Permalink
fixed the yamllint issues
Browse files Browse the repository at this point in the history
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
  • Loading branch information
naveensrinivasan committed Mar 30, 2024
1 parent a49a5c3 commit 1a7d0d9
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions tasks/scanvulnerability.yaml
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
---
tasks:
- name: grype-scan-sbom
description: Create a UDS package with configurable flavor and extract the SBOM from all created packages and analyze for vulnerabilities
actions:
- cmd: |
uds zarf package create . --flavor=upstream --confirm --no-progress -o sbom
for file in sbom/*.zst; do
uds zarf package inspect "$file" --sbom-out ./sbom --no-progress;
for file in sbom/*.zst; do
uds zarf package inspect "$file" --sbom-out ./sbom --no-progress;
done
if ! command -v grype &> /dev/null; then
echo "Grype could not be found, installing..."
curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin
Expand All @@ -20,5 +20,4 @@ tasks:
echo "Output saved to ./sarif/${base}.sarif"
done
' sh {} +
echo "All SBOM files processed and analyzed for vulnerabilities."

0 comments on commit 1a7d0d9

Please sign in to comment.