Revert "refactor(setup-db): to run trivy in docker (#54)"
CI / Test Merge SARIF Files (pull_request) Successful in 3s
CI / Test Setup Trivy amd64 (pull_request) Successful in 5s
CI / Test Get Images From Files (pull_request) Successful in 5s
CI / Test Setup DB (pull_request) Successful in 7s
CI / Test Setup Trivy arm64 (pull_request) Successful in 37s

This reverts commit 81eda53a59.
This commit is contained in:
2026-04-10 19:35:23 +02:00
parent 81eda53a59
commit 4b95f85bfd
3 changed files with 5 additions and 42 deletions
+1 -22
View File
@@ -10,10 +10,6 @@ inputs:
description: "Path to the Trivy cache directory (default: ${{runner.temp}}/trivy)"
required: false
default: "${{ runner.temp }}/trivy"
trivy-version:
description: "Trivy docker image version to use (full image reference including digest is recommended)"
required: false
default: "ghcr.io/aquasecurity/trivy:0.69.3@sha256:bcc376de8d77cfe086a917230e818dc9f8528e3c852f7b1aff648949b6258d1c"
outputs:
cache-dir:
@@ -36,21 +32,4 @@ runs:
trivy-db-${{ steps.current-date.outputs.current-date }}
- if: steps.restore-db.outputs.cache-hit != 'true'
shell: bash
run: |
docker run --rm \
--name trivy-db-download \
--user "$(id -u):$(id -g)" \
--read-only \
--env-file /dev/null \
--cap-drop ALL \
--pids-limit 64 \
--memory=512m \
--memory-swap=512m \
--cpus=1 \
--ipc private \
--cgroupns private \
--security-opt no-new-privileges \
--security-opt apparmor=docker-default \
--tmpfs /tmp:rw,noexec,nosuid,nodev,size=1g \
--mount type=bind,src=${{ inputs.cache-dir }},dst=/cache \
${{ inputs.trivy-version }} fs --download-db-only --cache-dir /cache
run: trivy fs --download-db-only --cache-dir "${{ inputs.cache-dir }}"