Skip to content

ci: update trivy scan workflow with VEX support (backport #278)#279

Merged
Vicente-Cheng merged 1 commit into
v1.8from
mergify/bp/v1.8/pr-278
May 28, 2026
Merged

ci: update trivy scan workflow with VEX support (backport #278)#279
Vicente-Cheng merged 1 commit into
v1.8from
mergify/bp/v1.8/pr-278

Conversation

@mergify
Copy link
Copy Markdown

@mergify mergify Bot commented May 28, 2026

Summary

  • update the Trivy GitHub Actions workflow
  • download Rancher VEX Hub report before scanning
  • pass VEX data to Trivy and show suppressed findings
  • add DCO signoff to the commit

Testing

Signed-off-by: pohanhuang <pohan.huang@suse.com>
(cherry picked from commit 225e9a3)
@Vicente-Cheng Vicente-Cheng merged commit 03c431e into v1.8 May 28, 2026
6 of 8 checks passed
@Vicente-Cheng Vicente-Cheng deleted the mergify/bp/v1.8/pr-278 branch May 28, 2026 21:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants