PR to update CPE dictionary index #120
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR to update CPE dictionary index | |
| on: | |
| schedule: | |
| - cron: "0 1 * * 1" # every monday at 1 AM | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| env: | |
| SLACK_NOTIFICATIONS: true | |
| jobs: | |
| upgrade-cpe-dictionary-index: | |
| runs-on: ubuntu-latest | |
| if: github.repository == 'anchore/syft' # only run for main repo | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Bootstrap environment | |
| uses: ./.github/actions/bootstrap | |
| - name: Bootstrap environment | |
| uses: ./.github/actions/bootstrap | |
| - run: | | |
| make generate-cpe-dictionary-index | |
| - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a #v2.1.0 | |
| id: generate-token | |
| with: | |
| app_id: ${{ secrets.TOKEN_APP_ID }} | |
| private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }} | |
| - uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e #v7.0.8 | |
| with: | |
| signoff: true | |
| delete-branch: true | |
| branch: auto/latest-cpe-dictionary-index | |
| labels: dependencies | |
| commit-message: "chore(deps): update CPE dictionary index" | |
| title: "chore(deps): update CPE dictionary index" | |
| body: | | |
| Update CPE dictionary index based on the latest available CPE dictionary | |
| token: ${{ steps.generate-token.outputs.token }} | |
| - uses: 8398a7/action-slack@77eaa4f1c608a7d68b38af4e3f739dcd8cba273e #v3.19.0 | |
| with: | |
| status: ${{ job.status }} | |
| fields: workflow,eventName,job | |
| text: Syft CPE dictionary index update failed | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_TOOLBOX_WEBHOOK_URL }} | |
| if: ${{ failure() && env.SLACK_NOTIFICATIONS == 'true' }} |