Skip to content

Commit c9da08e

Browse files
committed
ci: fix artifact build by disabling trivy cache update skip
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
1 parent 3f7135b commit c9da08e

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

.github/workflows/artifacts.yaml

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,6 @@ jobs:
4444
id-token: write
4545
security-events: write
4646

47-
4847
outputs:
4948
name: ${{ steps.image-name.outputs.value }}
5049
digest: ${{ steps.build.outputs.digest }}
@@ -203,21 +202,21 @@ jobs:
203202
with:
204203
path: cache/db
205204
key: trivy-cache-${{ steps.date.outputs.date }}
206-
restore-keys:
207-
trivy-cache-
205+
restore-keys: trivy-cache-
208206

209207
- name: Run Trivy vulnerability scanner
210208
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29.0
211209
with:
212210
input: image
213211
format: sarif
214212
output: trivy-results.sarif
215-
scan-type: 'fs'
216-
scan-ref: '.'
213+
scan-type: "fs"
214+
scan-ref: "."
217215
cache-dir: "./cache"
218-
env:
219-
TRIVY_SKIP_DB_UPDATE: true
220-
TRIVY_SKIP_JAVA_DB_UPDATE: true
216+
# Disable skipping trivy cache for now
217+
# env:
218+
# TRIVY_SKIP_DB_UPDATE: true
219+
# TRIVY_SKIP_JAVA_DB_UPDATE: true
221220

222221
## Trivy-db uses `0600` permissions.
223222
## But `action/cache` use `runner` user by default

0 commit comments

Comments
 (0)