mirror of
https://github.com/hauler-dev/hauler.git
synced 2026-08-18 03:46:48 +00:00
utilize vex for trivy scan (#662)
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
This commit is contained in:
@@ -49,7 +49,9 @@ test:
|
||||
# check for vulnerabilities
|
||||
vulns:
|
||||
govulncheck $(GO_FILES) > $(GO_VULNCHECKS) 2>&1 || true
|
||||
trivy fs . > $(TRIVY_RESULTS) 2>&1 || true
|
||||
curl -fsSL -o rancher.openvex.json https://media.githubusercontent.com/media/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json || true
|
||||
trivy fs --vex rancher.openvex.json --skip-files rancher.openvex.json . > $(TRIVY_RESULTS) 2>&1 || true
|
||||
rm rancher.openvex.json || true
|
||||
|
||||
# cleanup artifacts
|
||||
clean:
|
||||
|
||||
Reference in New Issue
Block a user