c6512333aa
- Created 19 AI-discoverable skills in .github/skills/ for GitHub Copilot - Updated 13 VS Code tasks to use skill-runner.sh - Added validation and helper infrastructure scripts - Maintained backward compatibility with deprecation notices - All tests pass with 85%+ coverage, zero security issues Benefits: - Skills are auto-discovered by GitHub Copilot - Consistent execution interface across all tools - Self-documenting with comprehensive SKILL.md files - Progressive disclosure reduces context usage - CI/CD workflows can use standardized skill-runner Closes: (add issue number if applicable) BREAKING CHANGE: None - backward compatible with 1 release cycle deprecation period
30 lines
1.0 KiB
Bash
Executable File
30 lines
1.0 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
# ⚠️ DEPRECATED: This script is deprecated and will be removed in v2.0.0
|
|
# Please use: .github/skills/scripts/skill-runner.sh security-scan-trivy
|
|
# For more info: docs/AGENT_SKILLS_MIGRATION.md
|
|
echo "⚠️ WARNING: This script is deprecated and will be removed in v2.0.0" >&2
|
|
echo " Please use: .github/skills/scripts/skill-runner.sh security-scan-trivy" >&2
|
|
echo " For more info: docs/AGENT_SKILLS_MIGRATION.md" >&2
|
|
echo "" >&2
|
|
sleep 1
|
|
|
|
# Build the local image first to ensure it's up to date
|
|
echo "Building charon:local..."
|
|
docker build -t charon:local .
|
|
|
|
# Run Trivy scan
|
|
echo "Running Trivy scan on charon:local..."
|
|
docker run --rm \
|
|
-v /var/run/docker.sock:/var/run/docker.sock \
|
|
-v $HOME/.cache/trivy:/root/.cache/trivy \
|
|
-v $(pwd)/.trivy_logs:/logs \
|
|
aquasec/trivy:latest image \
|
|
--severity CRITICAL,HIGH \
|
|
--output /logs/trivy-report.txt \
|
|
charon:local
|
|
|
|
echo "Scan complete. Report saved to .trivy_logs/trivy-report.txt"
|
|
cat .trivy_logs/trivy-report.txt
|