fix(ci): Hotfix permissions for trivy push and docker login

mattermost / mattermost-operator

Mattermost Operator for Kubernetes

Apache License 2.0

118 stars 70 forks source link

fix(ci): Hotfix permissions for trivy push and docker login #346

Closed toninis closed 1 year ago

toninis commented 1 year ago

Summary

Fix Docker login on cd workflow
Use proper permissions for security upload results https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/uploading-a-sarif-file-to-github#example-workflow-for-sarif-files-generated-outside-of-a-repository

Ticket Link

Release Note

mm-cloud-bot commented 1 year ago

@toninis: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

I understand the commands that are listed [here](https://chewbacca.core.cloud.mattermost.com/command-help.html)

toninis commented 1 year ago

/release-note-none

github-advanced-security[bot] commented 1 year ago

You have successfully added a new Trivy configuration .github/workflows/ci.yml:build. As part of the setup process, we have scanned this repository and found 6 existing alerts. Please check the repository Security tab to see all alerts.