From 22b14c941eedd047a03da61a5b88f038e2bd9de8 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Sat, 11 Jul 2026 00:13:16 -0400 Subject: [PATCH] utilize vex for trivy scan (backport #662) (#666) Signed-off-by: Adam Martin Co-authored-by: Adam Martin --- Makefile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 1bf7242..6ff2f52 100644 --- a/Makefile +++ b/Makefile @@ -49,7 +49,9 @@ test: # check for vulnerabilities vulns: govulncheck $(GO_FILES) > $(GO_VULNCHECKS) 2>&1 || true - trivy fs . > $(TRIVY_RESULTS) 2>&1 || true + curl -fsSL -o rancher.openvex.json https://media.githubusercontent.com/media/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json || true + trivy fs --vex rancher.openvex.json --skip-files rancher.openvex.json . > $(TRIVY_RESULTS) 2>&1 || true + rm rancher.openvex.json || true # cleanup artifacts clean: