From 57780732e408fcb6db7a8596252a040f731b8988 Mon Sep 17 00:00:00 2001 From: Evan Richardson Date: Wed, 5 May 2021 00:33:12 +0000 Subject: [PATCH] Update .gitlab-ci.yml --- .gitlab-ci.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 14b5598..e09f074 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -115,7 +115,6 @@ sonarqube-check: trivy: stage: test - image: docker:stable extends: - .docker_base before_script: @@ -127,9 +126,9 @@ trivy: # Build image - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA ./Docker/ # Build report - - ./trivy --exit-code 0 --cache-dir .trivycache/ --no-progress --format template --template "@contrib/gitlab.tpl" -o gl-container-scanning-report.json image python:3.4-alpine + - ./trivy --exit-code 0 --cache-dir .trivycache/ --no-progress --format template --template "@contrib/gitlab.tpl" -o gl-container-scanning-report.json image $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA # Print report - - ./trivy --exit-code 0 --cache-dir .trivycache/ --no-progress --severity HIGH image python:3.4-alpine + - ./trivy --exit-code 0 --cache-dir .trivycache/ --no-progress --severity HIGH image $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA # Fail on severe vulnerabilities - ./trivy --exit-code 1 --cache-dir .trivycache/ --severity CRITICAL --no-progress image $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA cache: