docs: fix Trivy links (changed domain) (ba1125a0) · Commits · to be continuous... / Cloud Native Buildpacks

README.md

+6 −6

Original line number	Diff line number	Diff line
		@@ -199,9 +199,9 @@ Examples or User-Provided variables:

		### `cnb-trivy` job

		This job performs a Vulnerability Static Analysis with [Trivy](https://aquasecurity.github.io/trivy) on your built image.
		This job performs a Vulnerability Static Analysis with [Trivy](https://trivy.dev) on your built image.

		Without any configuration Trivy will run in [standalone](https://aquasecurity.github.io/trivy/latest/docs/references/modes/standalone/) mode.
		Without any configuration Trivy will run in [standalone](https://trivy.dev/docs/latest/references/modes/standalone/) mode.

		If you want to run Trivy in client/server mode, you need to set the `TRIVY_SERVER` environment variable.

		@@ -216,9 +216,9 @@ It is bound to the `package-test` stage, and uses the following variables:
		\| ---------------------- \| -------------------------------------- \| ----------------- \|
		\| `trivy-image` / `CNB_TRIVY_IMAGE` \| The docker image used to scan images with Trivy \| `docker.io/aquasec/trivy:latest` <br/>[![Trivy Badge](https://to-be-continuous.gitlab.io/doc/secu/trivy-badge-CNB_TRIVY_IMAGE.svg)](https://to-be-continuous.gitlab.io/doc/secu/trivy-CNB_TRIVY_IMAGE) \|
		\| `trivy-disabled` / `CNB_TRIVY_DISABLED` \| Set to `true` to disable Trivy analysis \| _(none)_ \|
		\| `trivy-args` / `CNB_TRIVY_ARGS` \| Additional [`trivy image` options](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_image/#options) \| `--ignore-unfixed --vuln-type os --disable-telemetry --skip-version-check` \|
		\| `trivy-args` / `CNB_TRIVY_ARGS` \| Additional [`trivy image` options](https://trivy.dev/docs/latest/references/configuration/cli/trivy_image/#options) \| `--ignore-unfixed --vuln-type os --disable-telemetry --skip-version-check` \|

		Other Trivy parameters shall be configured using [Trivy environment variables](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_image/#options).
		Other Trivy parameters shall be configured using [Trivy environment variables](https://trivy.dev/docs/latest/references/configuration/cli/trivy_image/#options).
		Examples:

		* `TRIVY_SEVERITY`: severities of security issues to be displayed (comma separated values: `UNKNOWN`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`)
		@@ -231,8 +231,8 @@ In addition to a textual report in the console, this job produces the following
		\| Report \| Format \| Usage \|
		\|-----------------------------------\| ---------------------------------------------------------------------------- \| ----------------- \|
		\| `reports/cnb-trivy-*.native.json` \| native Trivy report format (json) \| [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/trivy/)<br/>_This report is generated only if DefectDojo template is detected_ \|
		\| `reports/cnb-trivy-*.gitlab.json` \| [Trivy report format for GitLab](https://aquasecurity.github.io/trivy/latest/tutorials/integrations/gitlab-ci/) format \| [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportscontainer_scanning) \|
		\| `reports/cnb-trivy-*.gitlab-codequality.json` \| [Trivy report format for GitLab Code Quality](https://aquasecurity.github.io/trivy/latest/tutorials/integrations/gitlab-ci/) format \| [GitLab Code Quality](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportscodequality) \|
		\| `reports/cnb-trivy-*.gitlab.json` \| [Trivy report format for GitLab](https://trivy.dev/docs/latest/tutorials/integrations/gitlab-ci/) format \| [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportscontainer_scanning) \|
		\| `reports/cnb-trivy-*.gitlab-codequality.json` \| [Trivy report format for GitLab Code Quality](https://trivy.dev/docs/latest/tutorials/integrations/gitlab-ci/) format \| [GitLab Code Quality](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportscodequality) \|

		### `cnb-publish` job

kicker.json

+2 −2

Original line number	Diff line number	Diff line
		@@ -44,7 +44,7 @@
		{
		"id": "trivy",
		"name": "Trivy",
		"description": "[Trivy](https://aquasecurity.github.io/trivy) vulnerability analysis",
		"description": "[Trivy](https://trivy.dev) vulnerability analysis",
		"disable_with": "CNB_TRIVY_DISABLED",
		"variables": [
		{
		@@ -55,7 +55,7 @@
		},
		{
		"name": "CNB_TRIVY_ARGS",
		"description": "Additional [`trivy image` options](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_image/#options)",
		"description": "Additional [`trivy image` options](https://trivy.dev/docs/latest/references/configuration/cli/trivy_image/#options)",
		"default": "--ignore-unfixed --vuln-type os --exit-on-eol 1 --disable-telemetry --skip-version-check",
		"advanced": true
		}

templates/gitlab-ci-cnb.yml

+2 −2

Original line number	Diff line number	Diff line
		@@ -58,7 +58,7 @@ spec:
		description: The docker image used to scan images with Trivy
		default: docker.io/aquasec/trivy:latest
		trivy-args:
		description: Additional [`trivy image` options](https://aquasecurity.github.io/trivy/latest/docs/references/configuration/cli/trivy_image/#options)
		description: Additional [`trivy image` options](https://trivy.dev/docs/latest/references/configuration/cli/trivy_image/#options)
		default: --ignore-unfixed --vuln-type os --exit-on-eol 1 --disable-telemetry --skip-version-check
		---
		# default workflow rules: Merge Request pipelines
		@@ -532,7 +532,7 @@ cnb-trivy:
		basename=$(echo "${CNB_SNAPSHOT_IMAGE}" \| sed 's\|[/:]\|_\|g')
		mkdir -p ./reports
		if [[ -z "$TRIVY_SERVER" ]]; then
		log_warn "\\e[93mYou are using Trivy in standalone mode. To get faster scans, consider setting the TRIVY_SERVER variable to the address of a Trivy server. More info here: https://aquasecurity.github.io/trivy/latest/docs/references/modes/client-server/\\e[0m"
		log_warn "\\e[93mYou are using Trivy in standalone mode. To get faster scans, consider setting the TRIVY_SERVER variable to the address of a Trivy server. More info here: https://trivy.dev/docs/latest/references/modes/client-server/\\e[0m"
		fi
		# Generate the native JSON report that can later be converted to other formats
		trivy image --no-progress ${CNB_TRIVY_ARGS} --exit-code 1 --format json --output reports/cnb-trivy-${basename}.native.json $CNB_SNAPSHOT_IMAGE \|\| exit_code=$?