embeddevio/awg-dash
1
0
Fork 0
Code Issues 40 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

ci: trivy ставим из релизного tarball (install.sh + v0.57.1 → 404), версия 0.76.1
ci / lint (push) Successful in 46s
Details
contract-openapi / openapi-contract (push) Failing after 35s
Details
contract-openapi / ts-client-is-current (push) Failing after 32s
Details
ci / unit (push) Successful in 56s
Details
ci / security (push) Successful in 1m13s
Details
ci / build (push) Has been skipped
Details
ci / image-scan (push) Has been skipped
Details
ci / push (push) Has been skipped
Details

Browse Source 
Refs #17
This commit is contained in:
embeddevio
2026-10-28 22:21:04 +03:00
parent a941525f2e
commit 88bdaf7d3a
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+6 -3
View File
@@ -245,13 +245,16 @@ jobs:
if: needs.lint.outputs.has_dockerfile == 'true' if: needs.lint.outputs.has_dockerfile == 'true'
runs-on: ubuntu-latest runs-on: ubuntu-latest
env: env:
TRIVY_VERSION: "0.57.1" TRIVY_VERSION: "0.76.1"
TRIVY_SEVERITY: "HIGH,CRITICAL" TRIVY_SEVERITY: "HIGH,CRITICAL"
steps: steps:
- name: install trivy - name: install trivy
run: | run: |
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \ set -euo pipefail
| sh -s -- -b /usr/local/bin "v${TRIVY_VERSION}" curl -fsSL -o /tmp/trivy.tar.gz \
"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
tar -xzf /tmp/trivy.tar.gz -C /usr/local/bin trivy
chmod +x /usr/local/bin/trivy
trivy --version trivy --version
- name: "trivy image (HIGH/CRITICAL -> fail)" - name: "trivy image (HIGH/CRITICAL -> fail)"