sync

.gitea/workflows/ci.yaml

@@ -4,33 +4,35 @@ on:
   pull_request:
 
 jobs:
-  test-setup-trivy:
+  test-setup-osv-scanner:
     strategy:
       matrix:
         arch: [ amd64, arm64 ]
-    name: Test Setup Trivy ${{ matrix.arch }}
+    name: Test Setup OSV-Scanner ${{ matrix.arch }}
     runs-on:
       - ubuntu-latest
       - linux_${{ matrix.arch }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Setup Trivy
-        uses: ./setup-trivy
-      - name: Run Trivy
-        run: trivy --version
+      - name: Setup OSV-Scanner
+        uses: ./setup-osv-scanner
+      - name: Run OSV-Scanner
+        run: osv-scanner --version
 
-  test-setup-db:
-    name: Test Setup DB
+  test-setup-osv-db:
+    name: Test Setup OSV offline DB
     runs-on:
       - ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ./setup-trivy
-      - name: Setup DB
+      - uses: ./setup-osv-scanner
+      - name: Setup offline DB
         id: setup-db
-        uses: ./setup-db
-      - name: Run Trivy
-        run: trivy fs --skip-db-update --cache-dir ${{ steps.setup-db.outputs.cache-dir }} .
+        uses: ./setup-osv-db
+      - name: Run OSV-Scanner with cached DB
+        env:
+          OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY: ${{ steps.setup-db.outputs.cache-dir }}
+        run: osv-scanner scan source --offline-vulnerabilities --allow-no-lockfiles -r .
 
   test-get-images-from-files:
     name: Test Get Images From Files