Skip to content

Commit 6e7b7d1

Browse files
Dr-DevOpssimar7
andauthored
Upgrade trivy to v0.53.0 (#369)
* Upgrade trivy to v0.53.0 * update tests --------- Co-authored-by: Simar <[email protected]>
1 parent 7c2007b commit 6e7b7d1

File tree

9 files changed

+67
-184
lines changed

9 files changed

+67
-184
lines changed

.github/workflows/test.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ on:
66
workflow_dispatch:
77

88
env:
9-
TRIVY_VERSION: 0.52.2
9+
TRIVY_VERSION: 0.53.0
1010
BATS_LIB_PATH: '/usr/lib/'
1111

1212
jobs:

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM ghcr.io/aquasecurity/trivy:0.52.2
1+
FROM ghcr.io/aquasecurity/trivy:0.53.0
22
COPY entrypoint.sh /
33
RUN apk --no-cache add bash curl npm
44
RUN chmod +x /entrypoint.sh

Makefile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
.PHONY: test
22

33
test:
4-
BATS_LIB_PATH=/usr/local/lib/ bats -r .
4+
BATS_LIB_PATH=/usr/local/lib/ bats --recurisve --timing --verbose-run .

test/data/config-sarif-report/report.sarif

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -205,7 +205,7 @@
205205
"text": "S3 buckets should each define an aws_s3_bucket_public_access_block"
206206
},
207207
"fullDescription": {
208-
"text": "The \u0026#34;block public access\u0026#34; settings in S3 override individual policies that apply to a given bucket, meaning that all public access can be controlled in one central types for that bucket. It is therefore good practice to define these settings for each bucket in order to clearly define the public access that can be allowed for it."
208+
"text": "The &#34;block public access&#34; settings in S3 override individual policies that apply to a given bucket, meaning that all public access can be controlled in one central types for that bucket. It is therefore good practice to define these settings for each bucket in order to clearly define the public access that can be allowed for it."
209209
},
210210
"defaultConfiguration": {
211211
"level": "note"
@@ -252,8 +252,7 @@
252252
]
253253
}
254254
}
255-
],
256-
"version": "0.50.0"
255+
]
257256
}
258257
},
259258
"results": [
@@ -501,12 +500,7 @@
501500
]
502501
}
503502
],
504-
"columnKind": "utf16CodeUnits",
505-
"originalUriBaseIds": {
506-
"ROOTPATH": {
507-
"uri": "file://D:\\projects\\trivy-action\\test\\data\\config-sarif-report/"
508-
}
509-
}
503+
"columnKind": "utf16CodeUnits"
510504
}
511505
]
512-
}
506+
}

test/data/config-scan/report.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,5 @@
11
{
22
"SchemaVersion": 2,
3-
"CreatedAt": "2024-04-12T16:53:35.5567541+03:00",
43
"ArtifactName": "test/data/config-scan",
54
"ArtifactType": "filesystem",
65
"Metadata": {

0 commit comments

Comments
 (0)