github/kairos
7
0
Fork 0
mirror of https://github.com/kairos-io/kairos.git synced 2025-02-09 05:18:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

🤖 Fixup trivy scans (#1093)

Browse Source 
* 🐧 Delete any files dangling in /tmp

Signed-off-by: mudler <mudler@c3os.io>

* 🤖 Skip /tmp scan in trivy

Signed-off-by: mudler <mudler@c3os.io>

---------

Signed-off-by: mudler <mudler@c3os.io>
This commit is contained in:
Ettore Di Giacinto 2023-03-10 14:28:14 +01:00 committed by GitHub
parent 999e1df7c3
commit cc90b6664a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Earthfile
View File

@ -414,6 +414,8 @@ docker:
END
END
RUN rm -rf /tmp/*
SAVE IMAGE $IMAGE
docker-rootfs:
@ -537,9 +539,9 @@ trivy-scan:
ARG FLAVOR
ARG VARIANT
WORKDIR /build
RUN /trivy filesystem --format sarif -o report.sarif --no-progress /
RUN /trivy filesystem --format template --template "@/contrib/html.tpl" -o report.html --no-progress /
RUN /trivy filesystem -f json -o results.json --no-progress /
RUN /trivy filesystem --skip-dirs /tmp --format sarif -o report.sarif --no-progress /
RUN /trivy filesystem --skip-dirs /tmp --format template --template "@/contrib/html.tpl" -o report.html --no-progress /
RUN /trivy filesystem --skip-dirs /tmp -f json -o results.json --no-progress /
SAVE ARTIFACT /build/report.sarif report.sartif AS LOCAL build/${VARIANT}-${FLAVOR}-${VERSION}-trivy.sarif
SAVE ARTIFACT /build/report.html report.html AS LOCAL build/${VARIANT}-${FLAVOR}-${VERSION}-trivy.html
SAVE ARTIFACT /build/results.json results.json AS LOCAL build/${VARIANT}-${FLAVOR}-${VERSION}-trivy.json