Skip to content

Commit cf49693

Browse files
committed
Fixed security-scan
1 parent f422f52 commit cf49693

2 files changed

Lines changed: 10 additions & 4 deletions

File tree

flavors/standard-EXASOL-all-java-11/flavor_base/packages.yml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,8 +54,18 @@ build_steps:
5454
version_mandatory: true
5555
- name: security_scan
5656
phases:
57+
- name: install_deps
58+
apt:
59+
packages:
60+
- name: gnupg
5761
- name: install_apt_packages
5862
apt:
63+
repos:
64+
trivy:
65+
key_url: https://aquasecurity.github.io/trivy-repo/deb/public.key
66+
entry: deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb
67+
generic main
68+
out_file: trivy.list
5969
packages:
6070
- name: trivy
6171
- name: gnupg

flavors/standard-EXASOL-all-java-11/flavor_base/security_scan/Dockerfile

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,6 @@ RUN mkdir -p /build_info/packages
55
COPY security_scan_packages.yaml /build_info/packages/security_scan_packages.yaml
66
RUN exaslpm install --package-file /build_info/packages/security_scan_packages.yaml --build-step security_scan
77

8-
RUN curl -s https://aquasecurity.github.io/trivy-repo/deb/public.key | apt-key add - &&\
9-
/scripts/install_scripts/install_ppa.pl --ppa 'deb https://aquasecurity.github.io/trivy-repo/deb jammy main' --out-file trivy.list
10-
11-
128
ENV SECURITY_SCANNERS="trivy"
139
COPY /security_scan/.trivyignore /.trivyignore
1410
COPY /security_scan/trivy-secret.yaml /trivy-secret.yaml

0 commit comments

Comments
 (0)