ci(trivy): pin Trivy 0.70.0 + curl -f
This commit is contained in:
parent
38ddaf4837
commit
efce68ae95
1 changed files with 4 additions and 3 deletions
|
|
@ -11,7 +11,7 @@ on:
|
||||||
- ".gitmodules"
|
- ".gitmodules"
|
||||||
|
|
||||||
env:
|
env:
|
||||||
TRIVY_VERSION: "0.59.1"
|
TRIVY_VERSION: "0.70.0"
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
config-and-image-scan:
|
config-and-image-scan:
|
||||||
|
|
@ -24,8 +24,9 @@ jobs:
|
||||||
|
|
||||||
- name: install trivy
|
- name: install trivy
|
||||||
run: |
|
run: |
|
||||||
curl -sSL "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" \
|
curl -fsSL "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" \
|
||||||
| tar -xz -C /usr/local/bin trivy
|
-o /tmp/trivy.tgz
|
||||||
|
tar -xzf /tmp/trivy.tgz -C /usr/local/bin trivy
|
||||||
trivy --version
|
trivy --version
|
||||||
|
|
||||||
- name: scan workflow files for misconfig
|
- name: scan workflow files for misconfig
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue