mirror of
https://github.com/kubernetes-sigs/external-dns.git
synced 2025-12-16 09:11:34 +01:00
Merge pull request #2487 from kubernetes-sigs/raffo/fix-trivy-again
Fix trivy workflow
This commit is contained in:
commit
d3fd0ade88
2
.github/workflows/trivy.yml
vendored
2
.github/workflows/trivy.yml
vendored
@ -1,8 +1,6 @@
|
|||||||
name: trivy vulnerability scanner
|
name: trivy vulnerability scanner
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches:
|
|
||||||
- master
|
|
||||||
jobs:
|
jobs:
|
||||||
build:
|
build:
|
||||||
name: Build
|
name: Build
|
||||||
|
|||||||
@ -2,10 +2,12 @@
|
|||||||
set -e
|
set -e
|
||||||
|
|
||||||
# install trivy
|
# install trivy
|
||||||
|
cd /tmp
|
||||||
curl -LO https://github.com/aquasecurity/trivy/releases/download/v0.20.2/trivy_0.20.2_Linux-64bit.tar.gz
|
curl -LO https://github.com/aquasecurity/trivy/releases/download/v0.20.2/trivy_0.20.2_Linux-64bit.tar.gz
|
||||||
echo "38a6de48e21a34e0fa0d2cf63439c0afcbbae0e78fb3feada7a84a9cf6e7f60c trivy_0.20.2_Linux-64bit.tar.gz" | sha256sum -c
|
echo "38a6de48e21a34e0fa0d2cf63439c0afcbbae0e78fb3feada7a84a9cf6e7f60c trivy_0.20.2_Linux-64bit.tar.gz" | sha256sum -c
|
||||||
tar -xvf trivy_0.20.2_Linux-64bit.tar.gz
|
tar -xvf trivy_0.20.2_Linux-64bit.tar.gz
|
||||||
chmod +x trivy
|
chmod +x trivy
|
||||||
|
|
||||||
# run trivy
|
# run trivy
|
||||||
./trivy image --exit-code 1 us.gcr.io/k8s-artifacts-prod/external-dns/external-dns:$(git describe --tags --always --dirty)
|
cd -
|
||||||
|
/tmp/trivy image --exit-code 1 us.gcr.io/k8s-artifacts-prod/external-dns/external-dns:$(git describe --tags --always --dirty)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user