From 5e1468d8d97087ffcc15010938bdf28526745f7d Mon Sep 17 00:00:00 2001 From: Szilard Parrag Date: Mon, 11 Nov 2024 13:32:28 +0100 Subject: [PATCH 1/2] chore(ci): bump trivy-action Signed-off-by: Szilard Parrag --- .github/workflows/artifacts.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml index b7a4a325..02a024fd 100644 --- a/.github/workflows/artifacts.yaml +++ b/.github/workflows/artifacts.yaml @@ -134,7 +134,7 @@ jobs: tar -xf image.tar -C image - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # 0.20.0 + uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # 0.28.0 with: input: image format: sarif @@ -223,7 +223,7 @@ jobs: if: inputs.publish && inputs.release - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0 + uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # 0.28.0 with: scan-type: config scan-ref: charts/${{ steps.chart-name.outputs.value }} From add0b80b56131358dde5e5e36571bfafafa5dbc5 Mon Sep 17 00:00:00 2001 From: Szilard Parrag Date: Mon, 11 Nov 2024 13:33:31 +0100 Subject: [PATCH 2/2] chore(CI): Use AWS ECR location for trivy DBs Signed-off-by: Szilard Parrag --- .github/workflows/artifacts.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml index 02a024fd..a6d5f34c 100644 --- a/.github/workflows/artifacts.yaml +++ b/.github/workflows/artifacts.yaml @@ -135,6 +135,9 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # 0.28.0 + env: + TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2 + TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 with: input: image format: sarif @@ -224,6 +227,9 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # 0.28.0 + env: + TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2 + TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1 with: scan-type: config scan-ref: charts/${{ steps.chart-name.outputs.value }}