utilize vex for trivy scan (#662)

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
This commit is contained in:
Adam Martin
2026-07-10 13:53:09 -04:00
committed by GitHub
parent b9069d57c6
commit 4195c4695e
+3 -1
View File
@@ -49,7 +49,9 @@ test:
# check for vulnerabilities
vulns:
govulncheck $(GO_FILES) > $(GO_VULNCHECKS) 2>&1 || true
trivy fs . > $(TRIVY_RESULTS) 2>&1 || true
curl -fsSL -o rancher.openvex.json https://media.githubusercontent.com/media/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json || true
trivy fs --vex rancher.openvex.json --skip-files rancher.openvex.json . > $(TRIVY_RESULTS) 2>&1 || true
rm rancher.openvex.json || true
# cleanup artifacts
clean: