Skip to content

Commit 0572d6d

Browse files
authored
feat: avoid caching any Docker builds
1 parent b86b550 commit 0572d6d

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

.github/workflows/build-docker-artifacts.yml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -217,6 +217,8 @@ jobs:
217217
load: true
218218
# Disable provenance as it creates weird multi-arch images: https://github.com/docker/build-push-action/issues/755
219219
provenance: false
220+
# Disable the cache to avoid outdated (base) images
221+
no-cache: true
220222
build-args: |
221223
DOCKERFILE_DIRECTORY=${{ matrix.component.flavor_directory }}/${{ matrix.component.directory }}
222224
PYTHON_BASE_IMAGE=${{ env.PYTHON_BASE_IMAGE }}
@@ -257,14 +259,15 @@ jobs:
257259
fi
258260
- name: Run Trivy vulnerability scanner
259261
if: ${{ inputs.skip_image_scan != true && fromJson(vars.SKIP_IMAGE_SCAN || 'false') != true && matrix.component.skip_image_scan != true }}
260-
uses: aquasecurity/trivy-action@0.30.0
262+
uses: aquasecurity/trivy-action@0.32.0
261263
with:
262264
image-ref: ${{ vars.DV_AWS_ECR_REGISTRY }}/${{ matrix.component.ecr_repository }}:${{ matrix.component.image_tag }}
263265
format: 'table'
264266
exit-code: '1'
265267
ignore-unfixed: false
266268
vuln-type: 'os,library'
267269
severity: ${{ steps.set_severity.outputs.severity }}
270+
cache: 'false'
268271
continue-on-error: false
269272

270273
- name: Push image

0 commit comments

Comments
 (0)