mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-05 20:40:16 -08:00
* sarif: Tweak format for GitHub UI
Signed-off-by: Simarpreet Singh <simar@linux.com>
* sarif: Make sarif easier to use with a default template
This will help us use Trivy in places like GitHub Actions where
we cannot specify a template as input.
$ trivy image --format=sarif alpine:3.10.1
Signed-off-by: Simarpreet Singh <simar@linux.com>
* Revert "sarif: Make sarif easier to use with a default template"
This reverts commit 5b5d1c8f7d.
* .dockerignore: Add un-needed large directories
Signed-off-by: Simarpreet Singh <simar@linux.com>
* Dockerfile: Add sarif template.
This will let users run and save the output through the docker image
Example:
```
docker run --rm -it -v $(pwd):/tmp aquasec/trivy:latest image -f template --template "@contrib/sarif.tpl" --output="/tmp/sarif.test" alpine:3.10.2
```
Signed-off-by: Simarpreet Singh <simar@linux.com>
10 lines
330 B
Docker
10 lines
330 B
Docker
FROM alpine:3.12
|
|
RUN addgroup -g 1000 -S appgroup && adduser -u 1000 -S appuser -G appgroup
|
|
RUN apk --no-cache add ca-certificates git rpm
|
|
COPY trivy /usr/local/bin/trivy
|
|
COPY contrib/gitlab.tpl contrib/gitlab.tpl
|
|
COPY contrib/junit.tpl contrib/junit.tpl
|
|
COPY contrib/sarif.tpl contrib/sarif.tpl
|
|
USER appuser
|
|
ENTRYPOINT ["trivy"]
|