mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-05 20:40:16 -08:00
* sarif: Tweak format for GitHub UI
Signed-off-by: Simarpreet Singh <simar@linux.com>
* sarif: Make sarif easier to use with a default template
This will help us use Trivy in places like GitHub Actions where
we cannot specify a template as input.
$ trivy image --format=sarif alpine:3.10.1
Signed-off-by: Simarpreet Singh <simar@linux.com>
* Revert "sarif: Make sarif easier to use with a default template"
This reverts commit 5b5d1c8f7d.
* .dockerignore: Add un-needed large directories
Signed-off-by: Simarpreet Singh <simar@linux.com>
* Dockerfile: Add sarif template.
This will let users run and save the output through the docker image
Example:
```
docker run --rm -it -v $(pwd):/tmp aquasec/trivy:latest image -f template --template "@contrib/sarif.tpl" --output="/tmp/sarif.test" alpine:3.10.2
```
Signed-off-by: Simarpreet Singh <simar@linux.com>
99 lines
2.3 KiB
YAML
99 lines
2.3 KiB
YAML
project_name: trivy
|
|
builds:
|
|
-
|
|
main: cmd/trivy/main.go
|
|
binary: trivy
|
|
ldflags:
|
|
- -s -w
|
|
- "-extldflags '-static'"
|
|
- -X main.version={{.Version}}
|
|
env:
|
|
- CGO_ENABLED=0
|
|
goos:
|
|
- darwin
|
|
- linux
|
|
goarch:
|
|
- amd64
|
|
- 386
|
|
- arm
|
|
- arm64
|
|
goarm:
|
|
- 7
|
|
|
|
nfpms:
|
|
-
|
|
formats:
|
|
- deb
|
|
- rpm
|
|
dependencies:
|
|
- rpm
|
|
vendor: "aquasecurity"
|
|
homepage: "https://github.com/aquasecurity"
|
|
maintainer: "Teppei Fukuda <knqyf263@gmail.com>"
|
|
description: "A Fast Vulnerability Scanner for Containers"
|
|
license: "Apache-2.0"
|
|
file_name_template: "{{.ProjectName}}_{{.Version}}_{{.Os}}-{{.Arch}}"
|
|
replacements:
|
|
amd64: 64bit
|
|
386: 32bit
|
|
arm: ARM
|
|
arm64: ARM64
|
|
darwin: macOS
|
|
linux: Linux
|
|
openbsd: OpenBSD
|
|
netbsd: NetBSD
|
|
freebsd: FreeBSD
|
|
dragonfly: DragonFlyBSD
|
|
|
|
archives:
|
|
-
|
|
format: tar.gz
|
|
name_template: "{{.ProjectName}}_{{.Version}}_{{.Os}}-{{.Arch}}"
|
|
replacements:
|
|
amd64: 64bit
|
|
386: 32bit
|
|
arm: ARM
|
|
arm64: ARM64
|
|
darwin: macOS
|
|
linux: Linux
|
|
openbsd: OpenBSD
|
|
netbsd: NetBSD
|
|
freebsd: FreeBSD
|
|
dragonfly: DragonFlyBSD
|
|
files:
|
|
- README.md
|
|
- LICENSE
|
|
- contrib/gitlab.tpl
|
|
|
|
brews:
|
|
-
|
|
github:
|
|
owner: aquasecurity
|
|
name: homebrew-trivy
|
|
dependencies:
|
|
- rpm
|
|
homepage: "https://github.com/aquasecurity/trivy"
|
|
description: ""
|
|
test: |
|
|
system "#{bin}/program --version"
|
|
|
|
dockers:
|
|
- image_templates:
|
|
- "docker.io/aquasec/trivy:{{ .Version }}"
|
|
- "docker.io/aquasec/trivy:latest"
|
|
binaries:
|
|
- trivy
|
|
build_flag_templates:
|
|
- "--label=org.label-schema.schema-version=1.0"
|
|
- "--label=org.label-schema.name={{ .ProjectName }}"
|
|
- "--label=org.label-schema.description=A Fast Vulnerability Scanner for Containers"
|
|
- "--label=org.label-schema.vendor=Aqua Security"
|
|
- "--label=org.label-schema.version={{ .Version }}"
|
|
- "--label=org.label-schema.build-date={{ .Date }}"
|
|
- "--label=org.label-schema.vcs=https://github.com/aquasecurity/trivy"
|
|
- "--label=org.label-schema.vcs-ref={{ .FullCommit }}"
|
|
extra_files:
|
|
- contrib/gitlab.tpl
|
|
- contrib/junit.tpl
|
|
- contrib/sarif.tpl
|