robot: Pin trivy version (#1090)

Fixes: #1087

Signed-off-by: mudler <mudler@c3os.io>
This commit is contained in:
Ettore Di Giacinto 2023-03-10 10:21:32 +01:00 committed by Itxaka
parent 6ded118d76
commit 2b87d05def

View File

@ -8,7 +8,8 @@ ARG ISO_NAME=kairos-${VARIANT}-${FLAVOR}
ARG LUET_VERSION=0.34.0
ARG OS_ID=kairos
ARG REPOSITORIES_FILE=framework-profile.yaml
# renovate: datasource=docker depName=aquasec/trivy
ARG TRIVY_VERSION=0.37.3
ARG COSIGN_SKIP=".*quay.io/kairos/.*"
IF [ "$FLAVOR" = "ubuntu" ]
@ -522,7 +523,8 @@ datasource-iso:
### Security target scan
###
trivy:
FROM aquasec/trivy
ARG TRIVY_VERSION
FROM aquasec/trivy:$TRIVY_VERSION
SAVE ARTIFACT /contrib contrib
SAVE ARTIFACT /usr/local/bin/trivy /trivy