paspo/docker-hugo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix trivy
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/tag Build is passing
Details

Browse Source
This commit is contained in:
Paolo Asperti 2025-01-17 00:04:19 +01:00
parent 01de5baae1
commit 1ed8bcbc31
Signed by: paspo
GPG Key ID: 06D46905D19D5182
1 changed files with 1 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
.gitea/workflows/vulnscan.yaml
View File

@ -17,12 +17,6 @@ jobs:
- name: Pull docker image - name: Pull docker image
run: docker pull docker.asperti.com/paspo/hugo:latest run: docker pull docker.asperti.com/paspo/hugo:latest
- uses: actions/cache/restore@v4
with:
path: |
/root/.cache/trivy
key: trivy-db
- name: Setup trivy - name: Setup trivy
run: | run: |
wget -O /tmp/trivy.deb https://github.com/aquasecurity/trivy/releases/download/v0.57.1/trivy_0.57.1_Linux-64bit.deb wget -O /tmp/trivy.deb https://github.com/aquasecurity/trivy/releases/download/v0.57.1/trivy_0.57.1_Linux-64bit.deb
@ -31,14 +25,7 @@ jobs:
- name: Run Trivy vulnerability scanner - name: Run Trivy vulnerability scanner
id: scan id: scan
run: | run: |
trivy image --format json docker.asperti.com/paspo/hugo:latest > trivy-results.json trivy --server ${{ secrets.TRIVY_SERVER }} --token ${{ secrets.TRIVY_TOKEN }} image --format json docker.asperti.com/paspo/hugo:latest > trivy-results.json
- uses: actions/cache/save@v4
if: always() # salva in cache anche se trova vulnerabilità
with:
path: |
/root/.cache/trivy
key: trivy-db
# if some vulnerability is found, we fail # if some vulnerability is found, we fail
- name: check output - name: check output