Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: implement trivy image scanner #10

Closed
wants to merge 2 commits into from
Closed

WIP: implement trivy image scanner #10

wants to merge 2 commits into from

Conversation

nodiscc
Copy link
Owner

@nodiscc nodiscc commented Dec 4, 2022

  • cache downloaded trivy tarball
  • run trivy on the image being built
  • run trivy periodically on the latest release image

@nodiscc nodiscc added the enhancement New feature or request label Dec 4, 2022
@nodiscc nodiscc self-assigned this Dec 4, 2022
@nodiscc nodiscc marked this pull request as draft December 4, 2022 12:06
@nodiscc nodiscc marked this pull request as ready for review April 7, 2023 16:23
@nodiscc nodiscc force-pushed the trivy branch 2 times, most recently from 9ad2b7c to 77ddee9 Compare April 7, 2023 16:26
@nodiscc nodiscc force-pushed the trivy branch 2 times, most recently from 864f03e to f6228da Compare May 2, 2023 10:20
- run trivy from makefile so that it can be run both locally and through github actions
- usage: make test_trivy TRIVY_TARGET_DOCKER_IMAGE=regist.ry/user/image:tag
- tested by downgrading the base image to alpine 3.15.7 and verifying that vulnerabilities are reported (https://github.com/nodiscc/Shaarli/actions/runs/4860040980/jobs/8663400103)
- TEMP/TESTING only push image to ghcr.io, run trivy on trivy branch/docker tag as well as master
- ref. shaarli#1531
@nodiscc
Copy link
Owner Author

nodiscc commented May 2, 2023

Moved to shaarli#1980

@nodiscc nodiscc closed this May 2, 2023
@nodiscc nodiscc deleted the trivy branch May 21, 2023 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant