trivy cache not needed anymore
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Paolo Asperti 2025-01-16 23:44:42 +01:00
parent 7758e98bd3
commit f799ffadb4
Signed by: paspo
GPG Key ID: 06D46905D19D5182

View File

@ -17,12 +17,6 @@ jobs:
- name: Pull docker image - name: Pull docker image
run: docker pull docker.asperti.com/paspo/ftps:latest run: docker pull docker.asperti.com/paspo/ftps:latest
- uses: actions/cache/restore@v4
with:
path: |
/root/.cache/trivy
key: trivy-db
- name: Setup trivy - name: Setup trivy
run: | run: |
wget -O /tmp/trivy.deb https://github.com/aquasecurity/trivy/releases/download/v0.57.1/trivy_0.57.1_Linux-64bit.deb wget -O /tmp/trivy.deb https://github.com/aquasecurity/trivy/releases/download/v0.57.1/trivy_0.57.1_Linux-64bit.deb
@ -33,13 +27,6 @@ jobs:
run: | run: |
trivy --server ${{ secrets.TRIVY_SERVER }} --token ${{ secrets.TRIVY_SERVER }} image --format json docker.asperti.com/paspo/ftps:latest > trivy-results.json trivy --server ${{ secrets.TRIVY_SERVER }} --token ${{ secrets.TRIVY_SERVER }} image --format json docker.asperti.com/paspo/ftps:latest > trivy-results.json
- uses: actions/cache/save@v4
if: always() # salva in cache anche se trova vulnerabilità
with:
path: |
/root/.cache/trivy
key: trivy-db
# if some vulnerability is found, we fail # if some vulnerability is found, we fail
- name: check output - name: check output
id: vulncount id: vulncount