grabowski/Northern-Thailand-Ping-River-Monitor
5
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases 15 Wiki Activity

Improve workflows: Add GitHub token support for Trivy scans

Browse Source 
Enhancements:
- Add GITHUB_TOKEN environment variable to security and release workflows
- Enable better rate limits for Trivy vulnerability scanner
- Add continue-on-error for resilient security scans
- Add GitHub token availability check with helpful messages
- Update documentation with GitHub token setup instructions

 Security Benefits:
- Reduced API rate limiting issues
- More reliable vulnerability scanning
- Better error handling and user feedback
- Improved workflow stability

 Documentation:
- Added GitHub token setup guide in GITEA_WORKFLOWS.md
- Clear instructions for repository secret configuration
This commit is contained in:
Alexander Grabowski
2025-08-12 16:09:06 +07:00
parent af62cfef0b
commit 71dc2b33a8
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/workflows/release.yml
View File

@@ -156,6 +156,8 @@ jobs:
image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.create-release.outputs.version }} image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.create-release.outputs.version }}
format: 'sarif' format: 'sarif'
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Upload Trivy scan results - name: Upload Trivy scan results
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v3

7
docs/GITEA_WORKFLOWS.md
View File

@@ -99,11 +99,18 @@ Configure these secrets in your Gitea repository settings:
```bash ```bash
GITEA_TOKEN # Gitea access token for container registry GITEA_TOKEN # Gitea access token for container registry
GITHUB_TOKEN # GitHub personal access token for better rate limits
SLACK_WEBHOOK_URL # Optional: Slack notifications SLACK_WEBHOOK_URL # Optional: Slack notifications
STAGING_WEBHOOK_URL # Optional: Staging deployment webhook STAGING_WEBHOOK_URL # Optional: Staging deployment webhook
PRODUCTION_WEBHOOK_URL # Optional: Production deployment webhook PRODUCTION_WEBHOOK_URL # Optional: Production deployment webhook
``` ```
**Setting up GitHub Token:**
1. Go to GitHub → Settings → Developer settings → Personal access tokens
2. Generate a new token with `public_repo` scope (for public repos) or `repo` scope (for private repos)
3. Copy the token
4. In your Gitea repository → Settings → Secrets → Add `GITHUB_TOKEN` with the copied value
### **Environment Variables** ### **Environment Variables**
Key environment variables used across workflows: Key environment variables used across workflows: