Merge pull request #2487 from kubernetes-sigs/raffo/fix-trivy-again

Fix trivy workflow
kubernetes-sigs · Dec 20, 2021 · 67393a6 · 67393a6
2 parents 23698a9 + 62b60e6
commit 67393a6
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -1,8 +1,6 @@
 name: trivy vulnerability scanner
 on:
   push:
-    branches:
-      - master
 jobs:
   build:
     name: Build

diff --git a/scripts/run-trivy.sh b/scripts/run-trivy.sh
@@ -2,10 +2,12 @@
 set -e
 
 # install trivy
+cd /tmp
 curl -LO https://github.com/aquasecurity/trivy/releases/download/v0.20.2/trivy_0.20.2_Linux-64bit.tar.gz 
 echo "38a6de48e21a34e0fa0d2cf63439c0afcbbae0e78fb3feada7a84a9cf6e7f60c trivy_0.20.2_Linux-64bit.tar.gz" | sha256sum -c 
 tar -xvf trivy_0.20.2_Linux-64bit.tar.gz
 chmod +x trivy
 
 # run trivy
-./trivy image --exit-code 1 us.gcr.io/k8s-artifacts-prod/external-dns/external-dns:$(git describe --tags --always --dirty)
+cd - 
+/tmp/trivy image --exit-code 1 us.gcr.io/k8s-artifacts-prod/external-dns/external-dns:$(git describe --tags --always --dirty)