fix trivy
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is failing

This commit is contained in:
Paolo Asperti 2025-01-17 00:02:47 +01:00
parent a90bc4bfc9
commit 041cbfff6e
Signed by: paspo
GPG Key ID: 06D46905D19D5182

View File

@ -16,12 +16,6 @@ jobs:
- name: Pull docker image
run: docker pull docker.asperti.com/paspo/dnscache:latest
- uses: actions/cache/restore@v4
with:
path: |
/root/.cache/trivy
key: trivy-db
- name: Setup trivy
run: |
wget -O /tmp/trivy.deb https://github.com/aquasecurity/trivy/releases/download/v0.57.1/trivy_0.57.1_Linux-64bit.deb
@ -30,14 +24,7 @@ jobs:
- name: Run Trivy vulnerability scanner
id: scan
run: |
trivy image --format json docker.asperti.com/paspo/dnscache:latest > trivy-results.json
- uses: actions/cache/save@v4
if: always() # salva in cache anche se trova vulnerabilità
with:
path: |
/root/.cache/trivy
key: trivy-db
trivy --server ${{ secrets.TRIVY_SERVER }} --token ${{ secrets.TRIVY_TOKEN }} image --format json docker.asperti.com/paspo/dnscache:latest > trivy-results.json
# if some vulnerability is found, we fail
- name: check output