From 1c484c369ec6eaffff3bb653ee1295383e31a770 Mon Sep 17 00:00:00 2001 From: Henri Rosten Date: Thu, 9 Nov 2023 17:12:13 +0200 Subject: [PATCH] Keep the 23.06 scan target - Keep scanning Ghaf 23.06 - Remove scan trigger on pull_request event Signed-off-by: Henri Rosten --- .github/workflows/vulnerability-scan.yml | 5 ++--- README.md | 1 + 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml index c5f219c..122bcf7 100644 --- a/.github/workflows/vulnerability-scan.yml +++ b/.github/workflows/vulnerability-scan.yml @@ -5,9 +5,6 @@ name: Ghaf Vulnerability Scan on: - pull_request: - branches: - - main schedule: - cron: "0 2 * * *" workflow_dispatch: @@ -26,6 +23,8 @@ jobs: run: nix run .#ghafscan -- --verbose=2 --whitelist=manual_analysis.csv --outdir=reports/main --flakeref=github:tiiuae/ghaf?ref=main --target=packages.x86_64-linux.generic-x86_64-release --target=packages.riscv64-linux.microchip-icicle-kit-release - name: Ghaf Vulnerability Scan (ghaf-23.09) run: nix run .#ghafscan -- --verbose=2 --whitelist=manual_analysis.csv --outdir=reports/ghaf-23.09 --flakeref=github:tiiuae/ghaf?ref=ghaf-23.09 --target=packages.x86_64-linux.generic-x86_64-release + - name: Ghaf Vulnerability Scan (ghaf-23.06) + run: nix run .#ghafscan -- --verbose=2 --whitelist=manual_analysis.csv --outdir=reports/ghaf-23.06 --flakeref=github:tiiuae/ghaf?ref=ghaf-23.06 --target=packages.x86_64-linux.generic-x86_64-release - uses: stefanzweifel/git-auto-commit-action@v4 with: commit_message: Automatic vulnerability report update diff --git a/README.md b/README.md index a807496..66a50c0 100644 --- a/README.md +++ b/README.md @@ -13,6 +13,7 @@ The Ghaf [vulnerability reports](./reports/) available on this repository are au - [Ghaf 'main' generic-x86_64-release](./reports/main/packages.x86_64-linux.generic-x86_64-release.md) - [Ghaf 'main' riscv64-linux.microchip-icicle-kit-release](./reports/main/packages.riscv64-linux.microchip-icicle-kit-release.md) - [Ghaf 'ghaf-23.09' generic-x86_64-release](./reports/ghaf-23.09/packages.x86_64-linux.generic-x86_64-release.md) +- [Ghaf 'ghaf-23.06' generic-x86_64-release](./reports/ghaf-23.06/packages.x86_64-linux.generic-x86_64-release.md) ## Motivation