woodpecker/.woodpecker/securityscan.yml

when:
  - event: [pull_request, cron]
  - event: push
    branch:
      - ${CI_REPO_DEFAULT_BRANCH}
      - release/*
      - renovate/*

variables:
  - &trivy_image aquasec/trivy:0.46.1
  - &trivy_plugin woodpeckerci/plugin-trivy:1.0.1

steps:
  check backend:
    depends_on: []
    image: *trivy_plugin
    settings:
      skip-dirs: web/,docs/

  check docs:
    depends_on: []
    image: *trivy_plugin
    settings:
      skip-dirs: node_modules/,plugins/woodpecker-plugins/node_modules/
      dir: docs/
    when:
      event: [pull_request, push, cron]
      branch: ${CI_REPO_DEFAULT_BRANCH}

  check web:
    depends_on: []
    image: *trivy_plugin
    settings:
      skip-dirs: node_modules/
      dir: web/