Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build trivy image every run #193

Open
navi86 opened this issue Jan 24, 2023 · 1 comment
Open

build trivy image every run #193

navi86 opened this issue Jan 24, 2023 · 1 comment

Comments

@navi86
Copy link

navi86 commented Jan 24, 2023

I see in the example https://github.com/aquasecurity/trivy-action#trivy-action
that pipeline only pull Tracy image, however when I use the same action it causes building privy docker image every run

Screenshot 2023-01-24 at 18 39 52

    - name: scan_docker_image_aquasec
      id: scan_docker_image_aquasec
      uses: aquasecurity/trivy-action@master
      with:
        image-ref: ${{ needs.build_container_image.outputs.docker_image }}
        severity: "CRITICAL,HIGH"
        security-checks: vuln
        ignore-unfixed: true
        exit-code: "1"

the logic was updated in this pr
https://github.com/aquasecurity/trivy-action/pull/27/files
Screenshot 2023-01-24 at 19 02 25

is it possible to prevent building image every time and point to image in repo ?

@navi86 navi86 changed the title build privy image every run build trivy image every run Jan 24, 2023
@chgl
Copy link

chgl commented Jul 9, 2024

Interested in this as well: I'm currently working with the containerd image store backend within hosted GitHub Actions (https://docs.docker.com/storage/containerd/). The "Build aquasecurity/trivy-action" step is ran before I switch to the containerd backend causing the trivy image not to be available in the docker daemon causing the action to fail with

Unable to find image 'e48dca:acac907d7d694e35963247070fe20afb' locally

I'm thinking of switching to manually running the cli but would much prefer having the action just use an existing image vs building one every time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants