ci(verify): trivy из релизного tarball, версия 0.76.1
ci / lint (push) Successful in 45s
contract-openapi / openapi-contract (push) Failing after 40s
contract-openapi / ts-client-is-current (push) Failing after 35s
ci / unit (push) Successful in 44s
ci / security (push) Successful in 1m10s
ci / build (push) Successful in 34s
ci / image-scan (push) Failing after 52s
ci / push (push) Has been skipped

Refs #17
This commit is contained in:
2026-10-28 22:21:04 +03:00
parent f077a85cba
commit 56979d9912
+6 -3
View File
@@ -245,13 +245,16 @@ jobs:
if: needs.lint.outputs.has_dockerfile == 'true' if: needs.lint.outputs.has_dockerfile == 'true'
runs-on: ubuntu-latest runs-on: ubuntu-latest
env: env:
TRIVY_VERSION: "0.57.1" TRIVY_VERSION: "0.76.1"
TRIVY_SEVERITY: "HIGH,CRITICAL" TRIVY_SEVERITY: "HIGH,CRITICAL"
steps: steps:
- name: install trivy - name: install trivy
run: | run: |
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \ set -euo pipefail
| sh -s -- -b /usr/local/bin "v${TRIVY_VERSION}" curl -fsSL -o /tmp/trivy.tar.gz \
"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
tar -xzf /tmp/trivy.tar.gz -C /usr/local/bin trivy
chmod +x /usr/local/bin/trivy
trivy --version trivy --version
- name: "trivy image (HIGH/CRITICAL -> fail)" - name: "trivy image (HIGH/CRITICAL -> fail)"