mirror of
https://github.com/sethforprivacy/p2pool-docker.git
synced 2025-12-07 08:05:03 -05:00
Only run Trivy against Dockerfile changes
As the Trivy run is scheduled via cron, we should only run in addition to that if the Dockerfile itself is changed.
This commit is contained in:
7
.github/workflows/trivy-analysis.yml
vendored
7
.github/workflows/trivy-analysis.yml
vendored
@@ -2,10 +2,11 @@ name: Build and scan container for vulnerabilities with Trivy
|
|||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches: [ main ]
|
paths:
|
||||||
|
- 'Dockerfile'
|
||||||
pull_request:
|
pull_request:
|
||||||
# The branches below must be a subset of the branches above
|
paths:
|
||||||
branches: [ main ]
|
- 'Dockerfile'
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '22 14 * * 0'
|
- cron: '22 14 * * 0'
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user