Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
41f05d9ecf | ||
|
|
0cd397afbf |
@@ -1,7 +1,7 @@
|
|||||||
name: "build"
|
name: "build"
|
||||||
on: [push, pull_request]
|
on: [push, pull_request]
|
||||||
env:
|
env:
|
||||||
TRIVY_VERSION: 0.42.0
|
TRIVY_VERSION: 0.42.1
|
||||||
BATS_LIB_PATH: '/usr/lib/'
|
BATS_LIB_PATH: '/usr/lib/'
|
||||||
jobs:
|
jobs:
|
||||||
build:
|
build:
|
||||||
|
|||||||
+1
-1
@@ -1,4 +1,4 @@
|
|||||||
FROM ghcr.io/aquasecurity/trivy:0.42.0
|
FROM ghcr.io/aquasecurity/trivy:0.42.1
|
||||||
COPY entrypoint.sh /
|
COPY entrypoint.sh /
|
||||||
RUN apk --no-cache add bash curl npm
|
RUN apk --no-cache add bash curl npm
|
||||||
RUN chmod +x /entrypoint.sh
|
RUN chmod +x /entrypoint.sh
|
||||||
|
|||||||
+1
-1
@@ -180,7 +180,7 @@ if [ "${format}" == "sarif" ] && [ "${limitSeveritiesForSARIF}" != "true" ]; the
|
|||||||
trivy --quiet ${scanType} --format sarif --output ${output} $SARIF_ARGS ${artifactRef}
|
trivy --quiet ${scanType} --format sarif --output ${output} $SARIF_ARGS ${artifactRef}
|
||||||
elif [ $trivyConfig ]; then
|
elif [ $trivyConfig ]; then
|
||||||
echo "Running Trivy with trivy.yaml config from: " $trivyConfig
|
echo "Running Trivy with trivy.yaml config from: " $trivyConfig
|
||||||
trivy --config $trivyConfig ${ARGS} ${scanType} ${artifactRef}
|
trivy --config $trivyConfig ${scanType} ${artifactRef}
|
||||||
returnCode=$?
|
returnCode=$?
|
||||||
else
|
else
|
||||||
echo "Running trivy with options: trivy ${scanType} ${ARGS}" "${artifactRef}"
|
echo "Running trivy with options: trivy ${scanType} ${ARGS}" "${artifactRef}"
|
||||||
|
|||||||
@@ -64,7 +64,7 @@
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"version": "0.42.0"
|
"version": "0.42.1"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"results": [
|
"results": [
|
||||||
|
|||||||
@@ -37,7 +37,7 @@
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"version": "0.42.0"
|
"version": "0.42.1"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"results": [
|
"results": [
|
||||||
|
|||||||
@@ -1,3 +0,0 @@
|
|||||||
vulnerability:
|
|
||||||
type: os
|
|
||||||
output: yamlconfig.test
|
|
||||||
@@ -81,11 +81,3 @@ bats_load_library bats-file
|
|||||||
echo "$output"
|
echo "$output"
|
||||||
assert_files_equal yamlconfig.test ./test/data/yamlconfig.test
|
assert_files_equal yamlconfig.test ./test/data/yamlconfig.test
|
||||||
}
|
}
|
||||||
|
|
||||||
@test "trivy image with trivy.yaml config and args" {
|
|
||||||
# trivy --config=./test/data/trivy-reduced.yaml image alpine:3.10
|
|
||||||
run ./entrypoint.sh "-v ./test/data/trivy-reduced.yaml" "-a image" "-i alpine:3.10" "-b json" "-g CRITICAL"
|
|
||||||
run diff yamlconfig.test ./test/data/yamlconfig.test
|
|
||||||
echo "$output"
|
|
||||||
assert_files_equal yamlconfig.test ./test/data/yamlconfig.test
|
|
||||||
}
|
|
||||||
|
|||||||
Reference in New Issue
Block a user