From 4195c4695ea7fc91543fa4afbf8feb87db6654e8 Mon Sep 17 00:00:00 2001 From: Adam Martin Date: Fri, 10 Jul 2026 13:53:09 -0400 Subject: [PATCH] utilize vex for trivy scan (#662) Signed-off-by: Adam Martin --- Makefile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 1bf7242..6ff2f52 100644 --- a/Makefile +++ b/Makefile @@ -49,7 +49,9 @@ test: # check for vulnerabilities vulns: govulncheck $(GO_FILES) > $(GO_VULNCHECKS) 2>&1 || true - trivy fs . > $(TRIVY_RESULTS) 2>&1 || true + curl -fsSL -o rancher.openvex.json https://media.githubusercontent.com/media/rancher/vexhub/refs/heads/main/reports/rancher.openvex.json || true + trivy fs --vex rancher.openvex.json --skip-files rancher.openvex.json . > $(TRIVY_RESULTS) 2>&1 || true + rm rancher.openvex.json || true # cleanup artifacts clean: