Commit f9dc8f1c authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

fix(Trivy): Trivy 0.53.0 added the clean subcommand for semantic cache management

parent 7a359686

templates/gitlab-ci-cnb.yml

+1 −1
Original line number Diff line number Diff line
@@ -505,7 +505,7 @@ cnb-trivy: 
    TRIVY_CACHE_DIR: ".trivycache/"

  script: |

    # cache cleanup is needed when scanning images with the same tags, it does not remove the database

    trivy image --clear-cache

    trivy clean --scan-cache || trivy image --clear-cache

    export TRIVY_USERNAME=${CNB_REGISTRY_SNAPSHOT_USER:-${CNB_REGISTRY_USER:-$CI_REGISTRY_USER}}

    export TRIVY_PASSWORD=${CNB_REGISTRY_SNAPSHOT_PASSWORD:-${CNB_REGISTRY_PASSWORD:-$CI_REGISTRY_PASSWORD}}

    basename=$(echo "${CNB_SNAPSHOT_IMAGE}" | sed 's|[/:]|_|g')