update trivy container so apt doesn't cause failure
All checks were successful
Build and Push Image / Build and push image (push) Successful in 34m11s
All checks were successful
Build and Push Image / Build and push image (push) Successful in 34m11s
This commit is contained in:
parent
6d91ea1f9b
commit
6f3dc0626f
@ -48,11 +48,11 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
echo "Installing Trivy "
|
echo "Installing Trivy "
|
||||||
sudo apt-get update
|
sudo apt-get update
|
||||||
sudo apt-get install wget apt-transport-https gnupg lsb-release
|
sudo apt-get install -y wget apt-transport-https gnupg lsb-release
|
||||||
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
|
wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
|
||||||
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
|
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
|
||||||
sudo apt-get update
|
sudo apt-get update
|
||||||
sudo apt-get install trivy
|
sudo apt-get install -y trivy
|
||||||
trivy image --format table --exit-code 1 --ignore-unfixed --vuln-type os,library --severity HIGH,CRITICAL git.aridgwayweb.com/armistace/blog:latest
|
trivy image --format table --exit-code 1 --ignore-unfixed --vuln-type os,library --severity HIGH,CRITICAL git.aridgwayweb.com/armistace/blog:latest
|
||||||
|
|
||||||
- name: Deploy
|
- name: Deploy
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user