celo-org / celo-blockchain

Official repository for the golang Celo Blockchain
https://celo.org
GNU Lesser General Public License v3.0
560 stars 198 forks source link

adding trivy scanning to the existing container build workflows #2181

Closed pputman-clabs closed 1 year ago

pputman-clabs commented 1 year ago

Description

need to add trivy scanning to the workflows for containers

Backwards compatibility

Fully backwards compatible

github-advanced-security[bot] commented 1 year ago

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

github-actions[bot] commented 1 year ago

Coverage from tests in ./e2e_test/... for ./consensus/istanbul/... at commit 47afc3a733ed0d58dde23128ea7664c698ef3eb5

coverage: 50.0% of statements across all listed packages
coverage:  63.0% of statements in consensus/istanbul
coverage:  40.0% of statements in consensus/istanbul/announce
coverage:  54.6% of statements in consensus/istanbul/backend
coverage:   0.0% of statements in consensus/istanbul/backend/backendtest
coverage:  24.3% of statements in consensus/istanbul/backend/internal/replica
coverage:  65.3% of statements in consensus/istanbul/core
coverage:  45.0% of statements in consensus/istanbul/db
coverage:   0.0% of statements in consensus/istanbul/proxy
coverage:  64.4% of statements in consensus/istanbul/uptime
coverage:  51.8% of statements in consensus/istanbul/validator
coverage:  79.2% of statements in consensus/istanbul/validator/random
github-actions[bot] commented 1 year ago

5860 passed, 2 failed, 45 skipped

Test failures:
  TestWalletNotifications: keystore
    keystore_test.go:453: wallet list doesn't match required accounts: have 541, want 540
keystore_test.go:481: can't find event with Kind=0 for bc1c5bb5fc6ce21691eb889e6119e2a687cc497d
  TestEthersJSCompatibilityDisableAfterGingerbread: e2e_test
Checking getExchangeSpenders. spenders = [0x000000000000000000000000000000000000d028]
Checking medianRate. numerator = 1000000000000000000000000  denominator = 1000000000000000000000000 
Checking gas price minimum. cusdValue = 100000000
Checking getExchangeSpenders. spenders = [0x000000000000000000000000000000000000d028]
Checking medianRate. numerator = 1000000000000000000000000  denominator = 1000000000000000000000000 
Checking gas price minimum. cusdValue = 100000000
    e2e_test.go:742: 
    e2e_test.go:744: 
This test report was produced by the test-summary action.  Made with ❤️ in Cambridge.
codecov[bot] commented 1 year ago

Codecov Report

Patch coverage has no change and project coverage change: -0.01% :warning:

Comparison is base (d2a8d92) 55.10% compared to head (8758c99) 55.10%.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #2181 +/- ## ========================================== - Coverage 55.10% 55.10% -0.01% ========================================== Files 679 679 Lines 114336 114336 ========================================== - Hits 63007 63005 -2 + Misses 47446 47435 -11 - Partials 3883 3896 +13 ``` [see 31 files with indirect coverage changes](https://app.codecov.io/gh/celo-org/celo-blockchain/pull/2181/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=celo-org)

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.