diff --git a/.github/workflows/osv-scanner-scan.yml b/.github/workflows/osv-scanner-scan.yml index e51dd907..94a03173 100644 --- a/.github/workflows/osv-scanner-scan.yml +++ b/.github/workflows/osv-scanner-scan.yml @@ -6,6 +6,8 @@ name: OSV-Scanner Scan on: schedule: - cron: "12 12 * * 1" + pull_request: + branches: [ main ] # Restrict jobs in this workflow to have no permissions by default; permissions # should be granted per job as needed using a dedicated `permissions` block @@ -17,7 +19,7 @@ jobs: actions: read contents: read # to fetch code (actions/checkout) security-events: write # for uploading SARIF files - if: ${{ github.repository == 'metal3-io/ip-address-manager' && github.event_name == 'schedule' }} + ### Condition temporarily removed for testing runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 @@ -28,6 +30,11 @@ jobs: uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 with: go-version: ${{ steps.vars.outputs.go_version }} + - name: Debug Container Context + run: | + cat /proc/1/cgroup + cat /etc/os-release + env | grep CONTAINER - name: Run OSV Scanner uses: google/osv-scanner/actions/scanner@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1 with: @@ -37,6 +44,9 @@ jobs: -r --skip-git ./ + env: + GOROOT: /opt/hostedtoolcache/go/${{ steps.vars.outputs.go_version }}/x64 + PATH: /opt/hostedtoolcache/go/${{ steps.vars.outputs.go_version }}/x64/bin:$PATH - name: "Run osv-scanner-reporter" uses: google/osv-scanner/actions/reporter@b13f37e1a1e4cb98556c1d34cd3256a876929be1 # v1.9.1 with: