Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Treat trivy errors as warnings #90

Merged
merged 1 commit into from
May 9, 2023
Merged

Treat trivy errors as warnings #90

merged 1 commit into from
May 9, 2023

Conversation

unixorn
Copy link
Owner

@unixorn unixorn commented May 9, 2023

Description

Trivy is annoyingly pedantic. Treat its 'errors' as just warnings.

License Acceptance

  • This repository is Apache version 2.0 licensed and by making this PR, I am contributing my changes to the repository under the terms of the Apache 2 license.

Type of changes

  • Add/update a helper script
  • Add/update link to an external resource like a blog post or video
  • Bug fix
  • New feature
  • Test updates
  • Text cleanups/updates

Checklist

  • I have read the CONTRIBUTING document.
  • All new and existing tests pass.
  • Any scripts added use #!/usr/bin/env interpreter instead of potentially platform-specific direct paths (#!/bin/sh is an allowed exception)
  • Scripts added/updated in this PR are all marked executable.
  • Scripts added/updated in this PR do not have a language file extension unless they are meant to be sourced and not run standalone. No one should have to know if a script was written in bash, python, ruby or whatever. Not including file extensions makes it easier to rewrite the script in another language later without having to change every reference to the previous version.
  • I have confirmed that any links added or updated in my PR are valid.

Signed-off-by: Joe Block <jpb@unixorn.net>
@unixorn
Copy link
Owner Author

unixorn commented May 9, 2023

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 1 0 0.01s
✅ COPYPASTE jscpd yes no 1.14s
❌ DOCKERFILE hadolint 1 1 0.07s
✅ EDITORCONFIG editorconfig-checker 2 0 0.01s
✅ REPOSITORY gitleaks yes no 0.26s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY secretlint yes no 0.65s
⚠️ REPOSITORY trivy yes 1 4.19s
✅ SPELL misspell 2 0 0.05s
✅ YAML prettier 1 0 0.41s
✅ YAML v8r 1 0 2.28s
✅ YAML yamllint 1 0 0.19s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@unixorn unixorn merged commit df9437d into main May 9, 2023
@unixorn unixorn deleted the make-trivy-not-fail-prs branch May 9, 2023 12:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant