From 14dba2c7e8c6b6774d1ebdf9a36e9d85afe8d98c Mon Sep 17 00:00:00 2001 From: JosueDev-afk Date: Mon, 1 Jun 2026 22:08:29 -0600 Subject: [PATCH] ci: replace trivy github action with docker-based scan --- .gitea/workflows/ci.yml | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index c428c48..45af7b8 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -76,13 +76,11 @@ jobs: needs: build steps: - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master - with: - image-ref: ci-image:latest - format: table - exit-code: 1 - severity: HIGH,CRITICAL - ignore-unfixed: true + run: | + docker run --rm \ + -v /var/run/docker.sock:/var/run/docker.sock \ + aquasec/trivy:latest \ + image --severity HIGH,CRITICAL --exit-code 1 --ignore-unfixed ci-image:latest summary: name: Generate Summary