feat(setup-trivy)!: automatically determine arch (#14)
CD / Release (push) Successful in 12s

Mapping x86_64 to "64bit" and aarch64 to "ARM64" as this is how Trivy names their releases.
Adjusted CICD to test-run both amd64 and arm64 versions.

Reviewed-on: t.behrendt/trivy-actions#14
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
This commit was merged in pull request #14.
This commit is contained in:
2025-11-08 19:22:30 +01:00
committed by t.behrendt
parent 5d059afcc6
commit f7ecf84dfe
4 changed files with 25 additions and 50 deletions
+17 -38
View File
@@ -7,45 +7,34 @@ branding:
inputs:
version:
description: "Trivy version to download (e.g., v0.66.0)"
description: "Trivy version to download (e.g., latest)"
required: false
default: "v0.66.0"
architecture:
description: "System architecture (amd64, arm64)"
required: false
default: "amd64"
runs:
using: "composite"
steps:
- shell: bash
id: arch
run: |
set -e
case "$(uname -m)" in
x86_64)
ARCH="64bit"
;;
aarch64)
ARCH="ARM64"
;;
esac
echo "ARCH=$ARCH" >> $GITHUB_OUTPUT
- name: Cache Trivy binary
id: cache-trivy
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
with:
path: /usr/local/bin/trivy
key: trivy-${{ inputs.version }}-${{ inputs.architecture }}
key: trivy-${{ inputs.version }}-${{ steps.arch.outputs.arch }}
restore-keys: |
trivy-${{ inputs.version }}-${{ inputs.architecture }}-
trivy-${{ inputs.version }}-
- name: Validate inputs
shell: bash
run: |
set -e
VERSION="${{ inputs.version }}"
ARCH="${{ inputs.architecture }}"
# Validate architecture
case "$ARCH" in
amd64|arm64)
;;
*)
echo "Error: Unsupported architecture '$ARCH'. Supported: amd64, arm64"
exit 1
;;
esac
trivy-${{ inputs.version }}-${{ steps.arch.outputs.arch }}
- name: Download and install Trivy
if: steps.cache-trivy.outputs.cache-hit != 'true'
shell: bash
@@ -53,20 +42,10 @@ runs:
set -e
VERSION="${{ inputs.version }}"
ARCH="${{ inputs.architecture }}"
case "$ARCH" in
amd64)
ARCH="64bit"
;;
arm64)
ARCH="ARM64"
;;
esac
mkdir -p /usr/local/bin
curl -sL "https://github.com/aquasecurity/trivy/releases/download/${VERSION}/trivy_${VERSION#v}_Linux-${ARCH}.tar.gz" -o trivy.tar.gz
curl -sL "https://github.com/aquasecurity/trivy/releases/download/${VERSION}/trivy_${VERSION#v}_Linux-${{ steps.arch.outputs.arch }}.tar.gz" -o trivy.tar.gz
tar -xzf trivy.tar.gz
chmod +x trivy
mv trivy /usr/local/bin/