diff --git a/.gitlab/ci/security-scan.gitlab-ci.yml b/.gitlab/ci/security-scan.gitlab-ci.yml index abd386490e40c362f675d71f8b732c2b258c4140..9cd62b6a02c98c4b5c414b1f0bc4e4400cc6fcfa 100644 --- a/.gitlab/ci/security-scan.gitlab-ci.yml +++ b/.gitlab/ci/security-scan.gitlab-ci.yml @@ -8,18 +8,17 @@ scan-docker-images: # Install Trivy in the pipeline environment - apk add --no-cache curl - curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.58.2 - script: - "docker compose pull -q" - "docker compose build -q" - for image in $(docker images --format "{{.Repository}}:{{.Tag}}"); do echo "Scanning $image ..."; - trivy image $image --severity critical --exit-code 0 >> ./trivy.${image}.out; + trivy image $image --severity critical --exit-code 0 >> ./trivy.out; done artifacts: when: on_success paths: - - trivy-*.json + - ./trivy.out rules: - if: $CI_COMMIT_BRANCH == "main" expire_in: 30 days