Add Trivy vulnerability scanning and publishing task

0GiS0 · Apr 25, 2024 · 97da128 · 97da128
1 parent 3e49f0f
commit 97da128
Show file tree

Hide file tree

Showing 3 changed files with 305 additions and 1 deletion.
diff --git a/.ado/templates/trivy.yml b/.ado/templates/trivy.yml
@@ -26,7 +26,7 @@ jobs:
         displayName: "Trivy vulnerability scanner in docker mode"
         inputs:
           script: |
-            trivy image ${{ parameters.IMAGE_NAME }} --exit-code 0 --format sarif ${{ parameters.working_directory }} > $(Build.ArtifactStagingDirectory)/trivy-results.sarif
+            trivy image ${{ parameters.IMAGE_NAME }} --exit-code 0 --format sarif > $(Build.ArtifactStagingDirectory)/trivy-results.sarif
       - task: PublishBuildArtifacts@1
         inputs:
           PathtoPublish: "$(Build.ArtifactStagingDirectory)/trivy-results.sarif"

diff --git a/steps.sh b/steps.sh
@@ -6,6 +6,7 @@ docker run -p 8080:80 apache
 
 # Trivy
 trivy image apache 
+trivy image apache --exit-code 0 --format sarif > trivy-results.sarif
 
 # Snyk
 snyk auth