ci: scan the distribution tree for known vulnerabilities (#41778) #2

	name: Security Scan

	on:
	push:
	branches:
	- master
	pull_request:
	types:
	- opened
	- synchronize
	- reopened
	schedule:
	# Weekly, so CVEs published against already-released code surface without a
	# code change.
	- cron: '0 3 * * 1'
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: security-scan-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	trivy:
	name: Trivy
	uses: owncloud/reusable-workflows/.github/workflows/trivy.yml@main
	with:
	# core builds its distribution tree with dist-dir, into build/dist/owncloud.
	# The recipe runs `yarn run clean-modules`, so node and yarn are required.
	app-name: owncloud
	make-target: dist-dir
	php-version: '8.3'
	php-extensions: 'curl, gd, json, xml, zip, imagick'
	node-version: '18'
	node-cache-dependency-path: build/yarn.lock

Navigation Menu