add trivy scanner github action to report vulnarabiliites. #2078
Conversation
humblec
force-pushed
the
trivy
branch
8 times, most recently
from
e745b67
to
fb5ea84
Compare
|
Thanks @guits ! looks like now we have the vulnarabilities reported on the base image here https://github.com/ceph/ceph-container/actions/runs/3470012183/jobs/5797688534 |
|
I don't think the Trivy check failing the pipelines will work - Trivy currently checks for RHEL vulnerabilities and still find some issues even with the latest CentOS Stream images currently. (possibly divergence of versioning?) (It might be useful to have it show up as warnings instead though) |
guits
force-pushed
the
trivy
branch
6 times, most recently
from
29413b7
to
77c0368
Compare
guits
force-pushed
the
trivy
branch
2 times, most recently
from
0c44067
to
e22c69c
Compare
This adds a trivy scanner test to report vulnerabilities. Signed-off-by: Humble Chirammal <[email protected]> Co-Authored-by: Guillaume Abrioux <[email protected]>
|
This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions. |
|
This pull request has been automatically closed due to inactivity. Please re-open if these changes are still required. |
This adds a trivy scanner test to report vulnerabilities.
Signed-off-by: Humble Chirammal [email protected]