rustuse 0.1.1

Unified facade crate for the published RustUse sets and child crates
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

name: Trivy

on:
    pull_request:
    push:
        branches:
            - main

permissions:
    contents: read
    security-events: write

jobs:
    filesystem-scan:
        name: Filesystem Vulnerability and Misconfiguration Scan
        runs-on: ubuntu-latest
        steps:
            - name: Check out repository
              uses: actions/checkout@v4

            - name: Generate Trivy SARIF report
              uses: aquasecurity/trivy-action@v0.36.0
              with:
                  scan-type: fs
                  scan-ref: .
                  scanners: vuln,misconfig
                  severity: HIGH,CRITICAL
                  trivyignores: .trivyignore
                  limit-severities-for-sarif: true
                  format: sarif
                  output: trivy-results.sarif
                  exit-code: "0"

            - name: Upload Trivy SARIF results
              if: always()
              continue-on-error: true
              uses: github/codeql-action/upload-sarif@v3
              with:
                  sarif_file: trivy-results.sarif

            - name: Fail on critical Trivy findings
              uses: aquasecurity/trivy-action@v0.36.0
              with:
                  scan-type: fs
                  scan-ref: .
                  scanners: vuln,misconfig
                  severity: CRITICAL
                  trivyignores: .trivyignore
                  format: table
                  exit-code: "1"
                  ignore-unfixed: true
                  skip-setup-trivy: true