lets just install trivy
This commit is contained in:
		
							parent
							
								
									235661bc43
								
							
						
					
					
						commit
						fa4deafcc6
					
				@ -45,14 +45,14 @@ jobs:
 | 
			
		||||
            git.aridgwayweb.com/armistace/blog:latest
 | 
			
		||||
 | 
			
		||||
      - name: Trivy Scan
 | 
			
		||||
        uses: aquasecurity/trivy-action@master
 | 
			
		||||
        with:
 | 
			
		||||
          image-ref: ${{ vars.DOCKER_SERVER }}/${{ vars.DOCKER_USERNAME }}/blog:latest
 | 
			
		||||
          format: table
 | 
			
		||||
          exit-code: 1
 | 
			
		||||
          ignore-unfixed: true
 | 
			
		||||
          vuln-type: os,library
 | 
			
		||||
          severity: HIGH,CRITICAL
 | 
			
		||||
        run: |
 | 
			
		||||
          echo "Installing Trivy
 | 
			
		||||
          sudo apt-get install wget apt-transport-https gnupg lsb-release
 | 
			
		||||
          wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
 | 
			
		||||
          echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
 | 
			
		||||
          sudo apt-get update
 | 
			
		||||
          sudo apt-get install trivy
 | 
			
		||||
          trivy image --format table --exit-code 1 --ignore-unfixed --vuln-type os,library --severity HIGH,CRITICAL git.aridgwayweb.com/armistace/blog:latest
 | 
			
		||||
 | 
			
		||||
      - name: Deploy
 | 
			
		||||
        run: |
 | 
			
		||||
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user