Skip to content

Commit f852ace

Browse files
committed
test: update trivy options ignore-unifixed and exit-code 1
From article: https://pythonspeed.com/articles/docker-python-security-scan/
1 parent d2ff3dd commit f852ace

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

RELEASE.txt

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -238,7 +238,8 @@ Roundup release checklist:
238238

239239
docker run -it --rm --volume \
240240
/var/run/docker.sock:/var/run/docker.sock \
241-
--name trivy aquasec/trivy:latest image rounduptracker/roundup:2.2.0
241+
--name trivy aquasec/trivy:latest image --exit-code 1 \
242+
--ignore-unfixed rounduptracker/roundup:2.2.0
242243

243244
You may need to explicitly update/refresh the scanners with:
244245
"docker pull anchore/grype:latest" and similarly for

0 commit comments

Comments
 (0)