Commit 855e4672 authored by Thibaud-Vdb's avatar Thibaud-Vdb
Browse files

Merge branch '659-trivy-jobs-update-images-and-jobs' into 'latest' 

Resolve "[Trivy_dependency] - Update image"

Closes #659

See merge request r2devops/hub!414
parents a1e550f5 1a04bc64

jobs/trivy_dependency/CHANGELOG.md

+3 −0
Original line number Diff line number Diff line 
# Changelog

All notable changes to this job will be documented in this file.



## [1.2.0] - 2022-10-31

* Update docker image version



## [1.1.0] - 2022-06-13

* Add docker image tag in variable

jobs/trivy_dependency/README.md

+2 −2
Original line number Diff line number Diff line
@@ -57,7 +57,7 @@ documentation](https://github.com/aquasecurity/trivy#application-dependencies){: 


| Name | Description | Default |

| ---- | ----------- | ------- |

| `TRIVY_VERSION` | Version of trivy to use. Releases version are available [here](https://github.com/aquasecurity/trivy/releases){:target="_blank"} | `0.12.0` |

| `TRIVY_VERSION` | Version of trivy to use. Releases version are available [here](https://github.com/aquasecurity/trivy/releases){:target="_blank"} | `0.34.0` |

| `TRIVY_SEVERITY` | Severity of vulnerabilities to be displayed | `UNKNOWN`,`LOW`,`MEDIUM`,`HIGH`,`CRITICAL`|

| `TRIVY_EXIT_ON_SEVERITY` | Severities of vulnerabilities for the job to fail at | `MEDIUM`,`HIGH`,`CRITICAL`|

| `TRIVY_EXIT_CODE` | Exit code when vulnerabilities were found | 0 |
@@ -73,7 +73,7 @@ documentation](https://github.com/aquasecurity/trivy#application-dependencies){: 
| `TRIVY_DEBUG` | Debug mode | false |

| `TRIVY_SKIP_UPDATE` | Skip vulnerability database update | false |

| `TRIVY_REMOVED_PKGS` | Detect vulns of Alpine removed packages | false |

| `IMAGE_TAG` | The default tag for the docker image | `0.12.0`  |

| `IMAGE_TAG` | The default tag for the docker image | `0.34.0`  |



## Artifacts

jobs/trivy_dependency/trivy_dependency.yml

+2 −2
Original line number Diff line number Diff line
@@ -26,10 +26,10 @@ trivy_dependency: 
    TRIVY_DEBUG: "false"

    TRIVY_OPTIONS: ""



    TRIVY_VERSION: "0.12.0"

    TRIVY_VERSION: "0.34.0"

    TRIVY_REMOTE: ""

    TRIVY_SKIP_UPDATE: "false"

    IMAGE_TAG: "0.12.0"

    IMAGE_TAG: "0.34.0"

  script:

    # Build report

    - trivy fs --template "@${TRIVY_TEMPLATE_DIRECTORY}/${TEMPLATE_NAME}" --cache-dir ${TRIVY_CACHE_DIR} --output ${TRIVY_OUTPUT} ${TRIVY_OPTIONS} ./