ci-includes-yml/templates/codescan.tpl.yml

.generate_sbom:
  image: registry.durp.info/nixos/nix:latest
  script:
    - ./scripts/scanner/syft-install.sh
    - ./scripts/scanner/syft-mkdir.sh
    - ./scripts/scanner/syft-go.sh
    - ./scripts/scanner/syft-docker.sh
  artifacts:
    expire_in: 1 hour
    paths:
      - $CI_PROJECT_DIR/syft

.generate_cve:
  image: registry.durp.info/nixos/nix:latest
  script:
    - ./scripts/scanner/grype-install.sh
    - ./scripts/scanner/grype.sh
  artifacts:
    expire_in: 1 hour
    paths:
      - $CI_PROJECT_DIR/syft