Polaris and Trivy Scan for Gradle Project

[prakash-hulamani]

Select Topic Area

Question

Body

Hello Team,

Could you please some one advise me the code for Polaris and Trivy Scan for Gradle Project.

I have tried with below but getting the "Error: Invalid language specified: 'kotlin'"

polaris:
  if: ${{ github.event_name == 'push' }}
  name: Polaris scan
  needs: build
  runs-on: ubuntu-latest
  steps:
    - uses: actions/download-artifact@v2
      with:
        name: workspace
    - name: Checkout common actions
      uses: actions/checkout@v2
      with:
        repository: maersk-global/github-actions-commons
        token: ${{ secrets.ACCESS_TOKEN }}
        path: .github/actions/commons
    - uses: ./.github/actions/commons/polaris-scan
      with:
        githubToken: ${{ secrets.ACCESS_TOKEN }}
        apiToken: ${{ secrets.POLARIS_API_TOKEN }}
        serverUrl: ${{ secrets.POLARIS_SERVER_URL }}

And for the Trivy Scan i am getting the below error

Run actions/download-artifact@v2
with:
name: docker-image
path: /tmp
Starting download for docker-image
Error: Unable to find an artifact with the name: docker-image

Codes used

trivy:
  name: Trivy Sacn
  runs-on: ubuntu-latest
  needs: build
  steps:
    - name: Checkout common actions
      uses: actions/checkout@v2
      with:
        repository: maersk-global/github-actions-commons
        ref: feature-trivy-scan
        token: ${{ secrets.ACCESS_TOKEN }}
        path: .github/actions/commons
    - name: Trivy Scan
      with:
        vulnerabilityType: library
        severity: CRITICAL
        imageName: ghcr.io/${{ github.repository }}
        imageVersion: v${{ github.run_id }}
      uses: ./.github/actions/commons/trivy-scan            

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬