File tree Expand file tree Collapse file tree
flavors/standard-EXASOL-all-java-11/flavor_base Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -54,8 +54,18 @@ build_steps:
5454 version_mandatory : true
5555- name : security_scan
5656 phases :
57+ - name : install_deps
58+ apt :
59+ packages :
60+ - name : gnupg
5761 - name : install_apt_packages
5862 apt :
63+ repos :
64+ trivy :
65+ key_url : https://aquasecurity.github.io/trivy-repo/deb/public.key
66+ entry : deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb
67+ generic main
68+ out_file : trivy.list
5969 packages :
6070 - name : trivy
6171 - name : gnupg
Original file line number Diff line number Diff line change @@ -5,10 +5,6 @@ RUN mkdir -p /build_info/packages
55COPY security_scan_packages.yaml /build_info/packages/security_scan_packages.yaml
66RUN exaslpm install --package-file /build_info/packages/security_scan_packages.yaml --build-step security_scan
77
8- RUN curl -s https://aquasecurity.github.io/trivy-repo/deb/public.key | apt-key add - &&\
9- /scripts/install_scripts/install_ppa.pl --ppa 'deb https://aquasecurity.github.io/trivy-repo/deb jammy main' --out-file trivy.list
10-
11-
128ENV SECURITY_SCANNERS="trivy"
139COPY /security_scan/.trivyignore /.trivyignore
1410COPY /security_scan/trivy-secret.yaml /trivy-secret.yaml
You can’t perform that action at this time.
0 commit comments