Skip to content

Commit a32aeff

Browse files
Refactor PR and vuln-diff
1 parent bae627c commit a32aeff

2 files changed

Lines changed: 17 additions & 14 deletions

File tree

.github/workflows/compare-vulnerabilities-PR.yml

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -39,14 +39,16 @@ jobs:
3939
with:
4040
base_ref: ${{ github.event.pull_request.base.ref }}
4141
head_ref: ${{ github.event.pull_request.head.sha }}
42-
write_summary: "true"
43-
upload_artifact: "true"
44-
min_severity: "LOW"
45-
report_html: "true"
46-
report_pdf: "true"
47-
pr_comment: "true"
48-
artifact_name: "vulnerability-diff-${{ github.event.inputs.branch_a }}-vs-${{ github.event.inputs.branch_b }}"
49-
pr_comment_marker: "<!-- vuln-diff-action:comment -->"
5042
github_token: ${{ secrets.GITHUB_TOKEN }}
5143
slack_webhook_url: ${{ secrets.SLACK_SECURITY_WEBHOOK_URL }}
52-
title_logo_url: "https://zettagenomics.com/wp-content/uploads/2022/10/Zetta-reversed-out-full-logo-dark-background.png"
44+
45+
# write_summary: "true"
46+
# upload_artifact: "true"
47+
# min_severity: "LOW"
48+
# report_html: "true"
49+
# report_pdf: "true"
50+
# pr_comment: "true"
51+
# artifact_name: "vulnerability-diff-${{ github.event.inputs.branch_a }}-vs-${{ github.event.inputs.branch_b }}"
52+
# pr_comment_marker: "<!-- vuln-diff-action:comment -->"
53+
54+
# title_logo_url: "https://zettagenomics.com/wp-content/uploads/2022/10/Zetta-reversed-out-full-logo-dark-background.png"

.github/workflows/compare-vulnerabilities.yml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,12 @@ jobs:
2424
fetch-depth: 0
2525
fetch-tags: true
2626

27-
# 2) Ensure base branch exists locally (fetch)
28-
- name: Fetch base branch
29-
run: |
30-
git fetch origin ${{ github.event.inputs.branch_a }}:refs/remotes/origin/${{ github.event.inputs.branch_a }}
31-
27+
- name: Set up JDK 8
28+
uses: actions/setup-java@v4
29+
with:
30+
distribution: 'temurin'
31+
java-version: '8'
32+
cache: 'maven'
3233
# 3) Run the action
3334
- name: Vulnerability Diff (Syft+Grype)
3435
uses: sec-open/vuln-diff-action@v2.0.0-alpha.1

0 commit comments

Comments
 (0)