From 3133a1e2827ae13801bc3cc1e2305276aa5ea9ff Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Wed, 13 Aug 2025 16:41:22 +0400 Subject: [PATCH] Update trivy to run on local image Signed-off-by: Bryan Frimin --- .github/workflows/make.yaml | 21 +-------------------- 1 file changed, 1 insertion(+), 20 deletions(-) diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index 837d5acd8..a6bb30bc9 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -28,11 +28,6 @@ jobs: - run: "npm ci" - uses: "docker/setup-qemu-action@v3" - uses: "docker/setup-buildx-action@v3" - - uses: "docker/login-action@v3" - with: - registry: "ghcr.io" - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - uses: "sigstore/cosign-installer@v3" - uses: "anchore/sbom-action/download-syft@v0" - uses: "goreleaser/goreleaser-action@v6" @@ -42,23 +37,9 @@ jobs: args: "release --clean --snapshot" env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - trivy-scan: - name: "trivy-scan" - needs: - - "release-snapshot" - runs-on: "ubuntu-22.04" - # Only run security scan for main branch (not for PR snapshots since they aren't pushed) - if: github.event_name == 'push' && github.ref == 'refs/heads/main' - permissions: - contents: "read" - packages: "read" - env: - TRIVY_DISABLE_VEX_NOTICE: true - steps: - uses: "aquasecurity/trivy-action@0.28.0" with: - image-ref: "ghcr.io/getprobo/probo:latest" + image-ref: "ghcr.io/getprobo/probo:v0.46.2-amd64" format: "table" exit-code: 1 ignore-unfixed: true