Skip to content

Commit e8d8e32

Browse files
Patel-Raj11Patel-Raj11
authored
update trivy-action version (#922)
update to commit 57a97c7e7821a5776cebc9bb87c984fa69cba8f1
1 parent 827baa6 commit e8d8e32

1 file changed

Lines changed: 47 additions & 48 deletions

File tree

‎.github/workflows/release.yml‎

Lines changed: 47 additions & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -140,10 +140,10 @@ jobs:
140140
- integration-tests
141141
- unit-tests
142142
if: ${{ always()
143-
&& needs.input-validate.result == 'success'
144-
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
145-
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
146-
&& needs['unit-tests'].result == 'success' }}
143+
&& needs.input-validate.result == 'success'
144+
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
145+
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
146+
&& needs['unit-tests'].result == 'success' }}
147147
runs-on: ubuntu-latest
148148
permissions:
149149
contents: read
@@ -260,7 +260,7 @@ jobs:
260260
exit 1
261261
fi
262262
- name: Scan SBOM for vulnerabilities using Trivy
263-
uses: aquasecurity/trivy-action@0.34.0
263+
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
264264
with:
265265
scan-type: sbom
266266
scan-ref: sbom.json
@@ -348,11 +348,11 @@ jobs:
348348
- unit-tests
349349
- pre-release
350350
if: ${{ always()
351-
&& needs.input-validate.result == 'success'
352-
&& needs.pre-release.result == 'success'
353-
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
354-
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
355-
&& needs['unit-tests'].result == 'success' }}
351+
&& needs.input-validate.result == 'success'
352+
&& needs.pre-release.result == 'success'
353+
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
354+
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
355+
&& needs['unit-tests'].result == 'success' }}
356356
permissions:
357357
pull-requests: write
358358
outputs:
@@ -363,7 +363,7 @@ jobs:
363363
IS_BETA_RELEASE: ${{ needs.input-validate.outputs.is_beta_release }}
364364
RELEASE_BRANCH: ${{ github.event.inputs.release_branch }}
365365
SLACK_TOKEN: ${{ secrets.SLACK_TOKEN }}
366-
ENV_DEV_NAME: 'first-review'
366+
ENV_DEV_NAME: "first-review"
367367
ENV_SEC_NAME: ${{ needs.input-validate.outputs.is_beta_release == 'true' && 'beta-release' || 'official-release' }}
368368

369369
steps:
@@ -450,13 +450,13 @@ jobs:
450450
if: always()
451451
shell: bash
452452
env:
453-
SLACK_TOKEN: ${{ secrets.SLACK_TOKEN }}
454-
CHANNEL: "#xrpl-py"
455-
EXECUTOR: ${{ github.triggering_actor || github.actor }}
453+
SLACK_TOKEN: ${{ secrets.SLACK_TOKEN }}
454+
CHANNEL: "#xrpl-py"
455+
EXECUTOR: ${{ github.triggering_actor || github.actor }}
456456
RELEASE_BRANCH: ${{ env.RELEASE_BRANCH }}
457457
PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
458-
RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
459-
DEV_REVIEWERS: ${{ steps.get_reviewers.outputs.reviewers_dev }}
458+
RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
459+
DEV_REVIEWERS: ${{ steps.get_reviewers.outputs.reviewers_dev }}
460460
run: |
461461
set -euo pipefail
462462
@@ -469,7 +469,6 @@ jobs:
469469
-d "$(jq -n --arg channel "$CHANNEL" --arg text "$MSG" '{channel:$channel, text:$text}')" \
470470
| jq -er '.ok' >/dev/null
471471
472-
473472
first_review:
474473
name: First approval (dev team)
475474
runs-on: ubuntu-latest
@@ -481,11 +480,11 @@ jobs:
481480
- pre-release
482481
- ask_for_dev_team_review
483482
if: ${{ always()
484-
&& needs.pre-release.result == 'success'
485-
&& needs.ask_for_dev_team_review.result == 'success'
486-
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
487-
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
488-
&& needs['unit-tests'].result == 'success' }}
483+
&& needs.pre-release.result == 'success'
484+
&& needs.ask_for_dev_team_review.result == 'success'
485+
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
486+
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
487+
&& needs['unit-tests'].result == 'success' }}
489488
environment:
490489
name: first-review
491490
url: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
@@ -505,20 +504,20 @@ jobs:
505504
- ask_for_dev_team_review
506505
- first_review
507506
if: ${{ always()
508-
&& needs.pre-release.result == 'success'
509-
&& needs.ask_for_dev_team_review.result == 'success'
510-
&& needs.first_review.result == 'success'
511-
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
512-
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
513-
&& needs['unit-tests'].result == 'success' }}
507+
&& needs.pre-release.result == 'success'
508+
&& needs.ask_for_dev_team_review.result == 'success'
509+
&& needs.first_review.result == 'success'
510+
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
511+
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
512+
&& needs['unit-tests'].result == 'success' }}
514513
env:
515514
PACKAGE_VERSION: ${{ needs.input-validate.outputs.package_version }}
516515
SLACK_TOKEN: ${{ secrets.SLACK_TOKEN }}
517516
EXECUTOR: ${{ github.triggering_actor || github.actor }}
518517
RELEASE_BRANCH: ${{ github.event.inputs.release_branch }}
519-
RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
520-
SEC_REVIEWERS: ${{ needs.ask_for_dev_team_review.outputs.reviewers_sec }}
521-
VULN_ART_URL: ${{ needs.pre-release.outputs.vuln_art_url }}
518+
RUN_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
519+
SEC_REVIEWERS: ${{ needs.ask_for_dev_team_review.outputs.reviewers_sec }}
520+
VULN_ART_URL: ${{ needs.pre-release.outputs.vuln_art_url }}
522521
steps:
523522
- name: Notify security reviewers on Slack
524523
env:
@@ -551,13 +550,13 @@ jobs:
551550
- ask_for_sec_team_review
552551
- unit-tests
553552
if: ${{ always()
554-
&& needs.pre-release.result == 'success'
555-
&& needs.ask_for_dev_team_review.result == 'success'
556-
&& needs.first_review.result == 'success'
557-
&& needs.ask_for_sec_team_review.result == 'success'
558-
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
559-
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
560-
&& needs['unit-tests'].result == 'success' }}
553+
&& needs.pre-release.result == 'success'
554+
&& needs.ask_for_dev_team_review.result == 'success'
555+
&& needs.first_review.result == 'success'
556+
&& needs.ask_for_sec_team_review.result == 'success'
557+
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
558+
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
559+
&& needs['unit-tests'].result == 'success' }}
561560
runs-on: ubuntu-latest
562561
timeout-minutes: 10 # Adjust based on typical publishing time
563562
environment:
@@ -609,14 +608,14 @@ jobs:
609608
- publish-to-pypi
610609
- unit-tests
611610
if: ${{ always()
612-
&& needs.pre-release.result == 'success'
613-
&& needs.ask_for_dev_team_review.result == 'success'
614-
&& needs.first_review.result == 'success'
615-
&& needs.ask_for_sec_team_review.result == 'success'
616-
&& needs['publish-to-pypi'].result == 'success'
617-
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
618-
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
619-
&& needs['unit-tests'].result == 'success' }}
611+
&& needs.pre-release.result == 'success'
612+
&& needs.ask_for_dev_team_review.result == 'success'
613+
&& needs.first_review.result == 'success'
614+
&& needs.ask_for_sec_team_review.result == 'success'
615+
&& needs['publish-to-pypi'].result == 'success'
616+
&& (needs['faucet-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
617+
&& (needs['integration-tests'].result == 'success' || needs.input-validate.outputs.is_beta_release == 'true')
618+
&& needs['unit-tests'].result == 'success' }}
620619
runs-on: ubuntu-latest
621620
timeout-minutes: 15 # Adjust based on typical signing and release time
622621

@@ -667,9 +666,9 @@ jobs:
667666
if: success()
668667
env:
669668
SLACK_TOKEN: ${{ secrets.SLACK_TOKEN }}
670-
REPO: ${{ github.repository }}
669+
REPO: ${{ github.repository }}
671670
PACKAGE_VERSION: ${{ env.PACKAGE_VERSION }}
672-
TAG: ${{ env.PACKAGE_VERSION }}
671+
TAG: ${{ env.PACKAGE_VERSION }}
673672
run: |
674673
set -euo pipefail
675674

0 commit comments

Comments
 (0)