Pour tout problème contactez-nous par mail : support@froggit.fr | La FAQ :grey_question: | Rejoignez-nous sur le Chat :speech_balloon:

Skip to content
Snippets Groups Projects
Commit 74000c8c authored by Dorian Turba's avatar Dorian Turba
Browse files

remove: trivy

parent 702a9ba3
No related branches found
No related tags found
No related merge requests found
...@@ -40,37 +40,6 @@ test_ruff_image: ...@@ -40,37 +40,6 @@ test_ruff_image:
script: script:
- ruff --help - ruff --help
trivy:
stage: test
image: docker:stable
variables:
SRC_IMAGE: $CI_REGISTRY_IMAGE:$TAG
TAG: $CI_COMMIT_SHA
TRIVY_VERSION: "latest"
services:
- name: docker:dind
entrypoint: ["env", "-u", "DOCKER_HOST"]
command: ["dockerd-entrypoint.sh"]
tags:
- docker
before_script:
- echo "$CI_REGISTRY_PASSWORD" | docker login -u "$CI_REGISTRY_USER" --password-stdin lab.frogg.it:5050
- docker info
- docker pull aquasec/trivy:$TRIVY_VERSION
- wget --no-verbose https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/gitlab.tpl -P /usr/local/bin/
- docker pull $SRC_IMAGE
allow_failure: true
script:
# Build report using Trivy Docker image
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -v $CI_PROJECT_DIR:/root aquasec/trivy:$TRIVY_VERSION image --no-progress --exit-code 0 --format template --template "/usr/local/bin/gitlab.tpl" -o /root/gl-container-scanning-report.json $SRC_IMAGE
# Print report
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:$TRIVY_VERSION image --no-progress --exit-code 0 --severity HIGH $SRC_IMAGE
# Fail on severe vulnerabilities
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:$TRIVY_VERSION image --no-progress --exit-code 1 --severity CRITICAL $SRC_IMAGE
cache:
paths:
- .trivycache/
docker_push: docker_push:
image: docker:latest image: docker:latest
services: services:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment