32 lines
930 B
YAML
32 lines
930 B
YAML
name: Close legacy trivy alerts
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
categories:
|
|
description: 'JSON array of categories to dismiss'
|
|
required: true
|
|
default: '["trivy-rc-patch-fleet-v4.84.2","trivy-rc-patch-fleet-v4.84.3"]'
|
|
permissions:
|
|
security-events: write
|
|
contents: read
|
|
jobs:
|
|
reset:
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
category: ${{ fromJSON(inputs.categories) }}
|
|
steps:
|
|
- run: |
|
|
cat > clean.sarif <<'EOF'
|
|
{
|
|
"version": "2.1.0",
|
|
"$schema": "https://json.schemastore.org/sarif-2.1.0.json",
|
|
"runs": [{ "tool": { "driver": { "name": "Trivy" } }, "results": [] }]
|
|
}
|
|
EOF
|
|
- uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6
|
|
with:
|
|
sarif_file: clean.sarif
|
|
category: ${{ matrix.category }}
|