Skip to content
Snippets Groups Projects
Commit d06a1d28 authored by Clayton, Brandon Scott's avatar Clayton, Brandon Scott
Browse files

trivy

parent 87e40d00
No related branches found
No related tags found
2 merge requests!409Production Release | nshmp-apps,!408Trivy
...@@ -81,9 +81,6 @@ default: ...@@ -81,9 +81,6 @@ default:
services: services:
- alias: docker - alias: docker
name: ${CI_REGISTRY}/devops/images/docker:20-dind name: ${CI_REGISTRY}/devops/images/docker:20-dind
tags:
- chs-shared
- dind
variables: variables:
DOCKER_DRIVER: overlay2 DOCKER_DRIVER: overlay2
...@@ -199,6 +196,9 @@ NPM Audit: ...@@ -199,6 +196,9 @@ NPM Audit:
stage: security stage: security
Trivy Docker Scan: Trivy Docker Scan:
cache:
paths:
- .trivy/
extends: extends:
- .dind - .dind
needs: needs:
...@@ -211,7 +211,7 @@ Trivy Docker Scan: ...@@ -211,7 +211,7 @@ Trivy Docker Scan:
- *production-env - *production-env
script: script:
- | - |
trivy image \ trivy --cache-dir .trivy image \
--exit-code 1 \ --exit-code 1 \
--severity HIGH,CRITICAL \ --severity HIGH,CRITICAL \
usgs/${CI_PROJECT_NAME}:${ENVIRONMENT}-latest; usgs/${CI_PROJECT_NAME}:${ENVIRONMENT}-latest;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment