pr_check_security.yaml · gitverse-demo/LandingsConfCiCd

create: coding_standards.md

ifox777

Коммит: 7534196

Файл конфигурации: pr_check_security.yaml

#258

Артефакты
1

Задания

scan

8м 42с

Артефакты
1

scan

Ошибка: 8 мин 42 с

Ожидание:2 с

Организационный:cloud_vm

Версия:5.1.0

Показывать время

Set up job18 с

📥 Checkout repository4 с

🛠️ Install system dependencies12 с

📦 Set up Go1 с

📦 Install security tools (parallel)3 мин 38 с

create: coding_standards.md

Артефакты
1

Задания

Артефакты
1

Set up job18 с

📥 Checkout repository4 с

🛠️ Install system dependencies12 с

📦 Set up Go1 с

📦 Install security tools (parallel)3 мин 38 с

📦 Install semgrep & sarif-tools (venv)1 мин 12 с

🧾 Prepare artifact directory and HTML template0 с

📦 Generate SBOM (CycloneDX)9 с

⚖️ Scan licenses (Trivy → JSON)1 с

📊 Generate licenses HTML report (via scan2html plugin)0 с

🐞 OSV vulnerability scan (by SBOM)5 с

🔍 Trivy vulnerability scan (from SBOM, JSON)13 с

🌐 Trivy vulnerability scan (from SBOM, HTML)0 с

🧯 Semgrep SAST (autofix + SARIF)15 с

🧾 Semgrep → HTML via sarif-tools1 с

🐳 Build Docker image (from distribution/Dockerfile)1 мин 37 с

🔍 Trivy image scan (JSON)3 с

🌐 Trivy image scan (HTML)0 с

🔐 Gitleaks secrets scan (JSON)2 с

📄 Gitleaks secrets scan (HTML)3 с

📊 Build report & evaluate policy0 с

📤 Upload security report artifact2 с

📊 Determine status emoji and clean base URL0 с

📝 Append security report link to PR description1 с

📢 Notify via Telegram (on any outcome)42 с

Complete job3 с

create: coding_standards.md

Артефакты1

Задания

Артефакты1

Set up job18 с

📥 Checkout repository4 с

🛠️ Install system dependencies12 с

📦 Set up Go1 с

📦 Install security tools (parallel)3 мин 38 с

📦 Install semgrep & sarif-tools (venv)1 мин 12 с

🧾 Prepare artifact directory and HTML template0 с

📦 Generate SBOM (CycloneDX)9 с

⚖️ Scan licenses (Trivy → JSON)1 с

📊 Generate licenses HTML report (via scan2html plugin)0 с

🐞 OSV vulnerability scan (by SBOM)5 с

🔍 Trivy vulnerability scan (from SBOM, JSON)13 с

🌐 Trivy vulnerability scan (from SBOM, HTML)0 с

🧯 Semgrep SAST (autofix + SARIF)15 с

🧾 Semgrep → HTML via sarif-tools1 с

🐳 Build Docker image (from distribution/Dockerfile)1 мин 37 с

🔍 Trivy image scan (JSON)3 с

🌐 Trivy image scan (HTML)0 с

🔐 Gitleaks secrets scan (JSON)2 с

📄 Gitleaks secrets scan (HTML)3 с

📊 Build report & evaluate policy0 с

📤 Upload security report artifact2 с

📊 Determine status emoji and clean base URL0 с

📝 Append security report link to PR description1 с

📢 Notify via Telegram (on any outcome)42 с

Complete job3 с

Артефакты
1

Артефакты
1