fix trivy
This commit is contained in:
parent
a90bc4bfc9
commit
041cbfff6e
@ -16,12 +16,6 @@ jobs:
|
||||
- name: Pull docker image
|
||||
run: docker pull docker.asperti.com/paspo/dnscache:latest
|
||||
|
||||
- uses: actions/cache/restore@v4
|
||||
with:
|
||||
path: |
|
||||
/root/.cache/trivy
|
||||
key: trivy-db
|
||||
|
||||
- name: Setup trivy
|
||||
run: |
|
||||
wget -O /tmp/trivy.deb https://github.com/aquasecurity/trivy/releases/download/v0.57.1/trivy_0.57.1_Linux-64bit.deb
|
||||
@ -30,14 +24,7 @@ jobs:
|
||||
- name: Run Trivy vulnerability scanner
|
||||
id: scan
|
||||
run: |
|
||||
trivy image --format json docker.asperti.com/paspo/dnscache:latest > trivy-results.json
|
||||
|
||||
- uses: actions/cache/save@v4
|
||||
if: always() # salva in cache anche se trova vulnerabilità
|
||||
with:
|
||||
path: |
|
||||
/root/.cache/trivy
|
||||
key: trivy-db
|
||||
trivy --server ${{ secrets.TRIVY_SERVER }} --token ${{ secrets.TRIVY_TOKEN }} image --format json docker.asperti.com/paspo/dnscache:latest > trivy-results.json
|
||||
|
||||
# if some vulnerability is found, we fail
|
||||
- name: check output
|
||||
|
Loading…
x
Reference in New Issue
Block a user