ci: update trivy options (#1637)

Remove deprecated flag and do not scan secret as ovs has embed private key for ssl.
kubeovn · Jun 23, 2022 · 3cfafe4 · 3cfafe4
1 parent 71dba39
commit 3cfafe4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Makefile b/Makefile
@@ -312,8 +312,8 @@ lint:
 
 .PHONY: scan
 scan:
-	trivy image --security-checks vuln --light --exit-code=1 --severity=HIGH --ignore-unfixed kubeovn/kube-ovn:$(RELEASE_TAG)
-	trivy image --security-checks vuln --light --exit-code=1 --severity=HIGH --ignore-unfixed $(REGISTRY)/vpc-nat-gateway:$(RELEASE_TAG)
+	trivy image --exit-code=1 --severity=HIGH --ignore-unfixed --security-checks vuln $(REGISTRY)/kube-ovn:$(RELEASE_TAG)
+	trivy image --exit-code=1 --severity=HIGH --ignore-unfixed --security-checks vuln $(REGISTRY)/vpc-nat-gateway:$(RELEASE_TAG)
 
 .PHONY: ut
 ut: