pr_check_security.yaml · gitverse-demo/LandingsConfCiCd

create: coding_standards.md

Chukanovdk

Коммит: 7534196

Файл конфигурации: pr_check_security.yaml

#262

Артефакты
1

Задания

scan

5м 24с

Артефакты
1

scan

Ошибка: 5 мин 24 с

Ожидание:1 с

Организационный:cloud_vm

Версия:5.1.0

Показывать время

Set up job8 с

📥 Checkout repository3 с

🛠️ Install system dependencies7 с

📦 Set up Go1 с

📦 Install security tools (parallel)2 мин 39 с

create: coding_standards.md

Артефакты
1

Задания

Артефакты
1

Set up job8 с

📥 Checkout repository3 с

🛠️ Install system dependencies7 с

📦 Set up Go1 с

📦 Install security tools (parallel)2 мин 39 с

📦 Install semgrep & sarif-tools (venv)47 с

🧾 Prepare artifact directory and HTML template0 с

📦 Generate SBOM (CycloneDX)8 с

⚖️ Scan licenses (Trivy → JSON)1 с

📊 Generate licenses HTML report (via scan2html plugin)1 с

🐞 OSV vulnerability scan (by SBOM)4 с

🔍 Trivy vulnerability scan (from SBOM, JSON)13 с

🌐 Trivy vulnerability scan (from SBOM, HTML)0 с

🧯 Semgrep SAST (autofix + SARIF)13 с

🧾 Semgrep → HTML via sarif-tools1 с

🐳 Build Docker image (from distribution/Dockerfile)2 с

🔍 Trivy image scan (JSON)4 с

🌐 Trivy image scan (HTML)0 с

🔐 Gitleaks secrets scan (JSON)2 с

📄 Gitleaks secrets scan (HTML)2 с

📊 Build report & evaluate policy0 с

📤 Upload security report artifact2 с

📊 Determine status emoji and clean base URL0 с

📝 Append security report link to PR description2 с

📢 Notify via Telegram (on any outcome)41 с

Complete job3 с

create: coding_standards.md

Артефакты1

Задания

Артефакты1

Set up job8 с

📥 Checkout repository3 с

🛠️ Install system dependencies7 с

📦 Set up Go1 с

📦 Install security tools (parallel)2 мин 39 с

📦 Install semgrep & sarif-tools (venv)47 с

🧾 Prepare artifact directory and HTML template0 с

📦 Generate SBOM (CycloneDX)8 с

⚖️ Scan licenses (Trivy → JSON)1 с

📊 Generate licenses HTML report (via scan2html plugin)1 с

🐞 OSV vulnerability scan (by SBOM)4 с

🔍 Trivy vulnerability scan (from SBOM, JSON)13 с

🌐 Trivy vulnerability scan (from SBOM, HTML)0 с

🧯 Semgrep SAST (autofix + SARIF)13 с

🧾 Semgrep → HTML via sarif-tools1 с

🐳 Build Docker image (from distribution/Dockerfile)2 с

🔍 Trivy image scan (JSON)4 с

🌐 Trivy image scan (HTML)0 с

🔐 Gitleaks secrets scan (JSON)2 с

📄 Gitleaks secrets scan (HTML)2 с

📊 Build report & evaluate policy0 с

📤 Upload security report artifact2 с

📊 Determine status emoji and clean base URL0 с

📝 Append security report link to PR description2 с

📢 Notify via Telegram (on any outcome)41 с

Complete job3 с

Артефакты
1

Артефакты
1