Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 8 Packages Projects Releases Wiki Activity

Skip website/config/custom.js in Trivy secret scan (#45621)

Browse Source
This commit is contained in:
Luke Heath
2026-05-15 14:24:52 -05:00
committed by GitHub
parent a63af8c7ff
commit 326436cb14
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/trivy-scan.yml
+3 -1
View File
@@ -129,13 +129,15 @@ jobs:
# - tools/osquery/in-a-box/osquery/fleet.key: TLS key for the "Fleet in a box" demo
# - tools/osquery/fleet.key: TLS key for the standalone osquery dev sandbox
# - orbit/pkg/insecure/proxy.go: TLS key used when running orbit with `--insecure` mode for development/testing.
# - ee/orbit/pkg/httpsigproxy/httpsigproxy.go: TLS key only used for osquery to orbit _local_ communication
# - ee/orbit/pkg/httpsigproxy/httpsigproxy.go: TLS key only used for osquery to orbit _local_ communication
# (for injection of HTTP signatures for the TPM-backed feature in Linux).
# - website/config/custom.js: commented-out Stripe test-mode placeholders shown as example config.
skip-files: |
tools/osquery/in-a-box/osquery/fleet.key
tools/osquery/fleet.key
orbit/pkg/insecure/proxy.go
ee/orbit/pkg/httpsigproxy/httpsigproxy.go
website/config/custom.js
- name: Upload Trivy scan results to GitHub Security tab
# Only upload on schedule/manual runs. PR/push uploads register