Skip to content
Security Scan

Update to Ubuntu 24.04.3 LTS (Noble Numbat) #4

Sign in to view logs

Update to Ubuntu 24.04.3 LTS (Noble Numbat)

Update to Ubuntu 24.04.3 LTS (Noble Numbat) #4

Workflow file for this run

.github/workflows/security-scan.yml at fd95ee6
name: Security Scan
on:
push:
branches: [ master, main ]
pull_request:
branches: [ master, main ]
schedule:
- cron: '0 0 * * 0' # Weekly on Sunday
jobs:
shellcheck:
name: ShellCheck Scripts
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@master
with:
scandir: './scripts'
severity: warning
python-security:
name: Python Security Check
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: '3.10'
- name: Install bandit
run: pip install bandit
- name: Run bandit security scan
run: bandit -r installer/ -f txt || true
trivy-scan:
name: Trivy Security Scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
scan-ref: '.'
format: 'table'
exit-code: '0'