utilize vex for trivy scan (backport #662) (#666)

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com>
This commit is contained in:
mergify[bot]
2026-07-11 00:13:16 -04:00
committed by GitHub
co-authored by Adam Martin
parent fcf53f0dbc
commit 22b14c941e
+3 -1
View File
@@ -49,7 +49,9 @@ test:
# check for vulnerabilities
vulns:
govulncheck $(GO_FILES) > $(GO_VULNCHECKS) 2>&1 || true
trivy fs . > $(TRIVY_RESULTS) 2>&1 || true
curl -fsSL -o rancher.openvex.json https://media.githubusercontent.com/media/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json || true
trivy fs --vex rancher.openvex.json --skip-files rancher.openvex.json . > $(TRIVY_RESULTS) 2>&1 || true
rm rancher.openvex.json || true
# cleanup artifacts
clean: