fix: Install dependencies for security workflow.

yonasBSD · Nov 23, 2024 · c93135c · c93135c
1 parent d81668d
commit c93135c
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
@@ -28,6 +28,12 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
+    - name: Install dependencies
+      run: |
+        sudo apt install -y just
+        sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d && sudo mv bin/task /usr/local/bin/
+        curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
+
     - name: Trufflehog
       run: task audit:secrets
 
@@ -36,5 +42,11 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
+    - name: Install dependencies
+      run: |
+        sudo apt install -y just
+        sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d && sudo mv bin/task /usr/local/bin/
+        curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sudo sh -s -- -b /usr/local/bin
+
     - name: Trivy
       run: task audit:vulnerabilities