ci(ariadne): use preloaded quality scanner image
This commit is contained in:
parent
a3b140e090
commit
e22a47b65e
4
Jenkinsfile
vendored
4
Jenkinsfile
vendored
@ -56,7 +56,7 @@ spec:
|
|||||||
- name: workspace-volume
|
- name: workspace-volume
|
||||||
mountPath: /home/jenkins/agent
|
mountPath: /home/jenkins/agent
|
||||||
- name: quality-tools
|
- name: quality-tools
|
||||||
image: registry.bstein.dev/bstein/quality-tools:sonar8.0.1-trivy0.70.0-arm64
|
image: registry.bstein.dev/bstein/quality-tools:sonar8.0.1-trivy0.70.0-db20260422-arm64
|
||||||
command: ["cat"]
|
command: ["cat"]
|
||||||
tty: true
|
tty: true
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
@ -175,7 +175,7 @@ PY
|
|||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
mkdir -p build
|
mkdir -p build
|
||||||
set +e
|
set +e
|
||||||
trivy fs --no-progress --format json --output build/trivy-fs.json --scanners vuln,secret,misconfig --severity HIGH,CRITICAL .
|
trivy fs --cache-dir "${TRIVY_CACHE_DIR}" --skip-db-update --timeout 5m --no-progress --format json --output build/trivy-fs.json --scanners vuln,secret,misconfig --severity HIGH,CRITICAL .
|
||||||
trivy_rc=$?
|
trivy_rc=$?
|
||||||
set -e
|
set -e
|
||||||
if [ ! -s build/trivy-fs.json ]; then
|
if [ ! -s build/trivy-fs.json ]; then
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user