diff --git a/.github/workflows/deploy_dev.yml b/.github/workflows/deploy_dev.yml index d3fa269..9e184bc 100644 --- a/.github/workflows/deploy_dev.yml +++ b/.github/workflows/deploy_dev.yml @@ -6,7 +6,7 @@ on: jobs: gitlab-dev-deploy: if: ${{ github.event.registry_package.package_version.container_metadata.tag.name == 'development' }} - uses: epam/ai-dial-ci/.github/workflows/deploy-development.yml@1.7.0 + uses: epam/ai-dial-ci/.github/workflows/deploy-development.yml@1.10.0 with: gitlab-project-id: "1829" gitlab-project-ref: "master" diff --git a/.github/workflows/pr-title-check.yml b/.github/workflows/pr-title-check.yml index 495a191..41f4764 100644 --- a/.github/workflows/pr-title-check.yml +++ b/.github/workflows/pr-title-check.yml @@ -9,6 +9,6 @@ on: jobs: pr-title-check: - uses: epam/ai-dial-ci/.github/workflows/pr-title-check.yml@1.7.0 + uses: epam/ai-dial-ci/.github/workflows/pr-title-check.yml@1.10.0 secrets: ACTIONS_BOT_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 2692edb..6d867c3 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -6,5 +6,7 @@ on: jobs: run_tests: - uses: epam/ai-dial-ci/.github/workflows/python_docker_pr.yml@1.7.0 + uses: epam/ai-dial-ci/.github/workflows/python_docker_pr.yml@1.10.0 secrets: inherit + with: + ort_version: 42.1.0 \ No newline at end of file diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 96625d2..b651943 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,5 +6,5 @@ on: jobs: release: - uses: epam/ai-dial-ci/.github/workflows/python_docker_release.yml@1.7.0 + uses: epam/ai-dial-ci/.github/workflows/python_docker_release.yml@1.10.0 secrets: inherit diff --git a/trivy.yaml b/trivy.yaml new file mode 100644 index 0000000..5b009e3 --- /dev/null +++ b/trivy.yaml @@ -0,0 +1,13 @@ +# Trivy configuration file +# https://aquasecurity.github.io/trivy/latest/docs/references/configuration/config-file/ +# Can be deleted after public ecr mirror will be added by default +db: + no-progress: true + repository: + - ghcr.io/aquasecurity/trivy-db:2 + - public.ecr.aws/aquasecurity/trivy-db:2 + java-repository: + - ghcr.io/aquasecurity/trivy-java-db:1 + - public.ecr.aws/aquasecurity/trivy-java-db:1 +misconfiguration: + checks-bundle-repository: public.ecr.aws/aquasecurity/trivy-checks \ No newline at end of file