t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

feat(setup-trivy): use latest as default version #15

Merged
t.behrendt merged 3 commits from feat-default-to-latest-version into main 2025-11-08 19:48:18 +01:00
Conversation 1 Commits 3 Files Changed 4
+19 -16
4 changed files with 19 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yaml
-4
View File
@@ -16,8 +16,6 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
- name: Setup Trivy - name: Setup Trivy
uses: ./setup-trivy uses: ./setup-trivy
with:
version: v0.66.0
- name: Run Trivy - name: Run Trivy
run: trivy --version run: trivy --version
@@ -28,8 +26,6 @@ jobs:
steps: steps:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
- uses: ./setup-trivy - uses: ./setup-trivy
with:
version: v0.66.0
- name: Setup DB - name: Setup DB
id: setup-db id: setup-db
uses: ./setup-db uses: ./setup-db
setup-db/README.md
-2
View File
@@ -28,8 +28,6 @@ jobs:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- name: Setup Trivy - name: Setup Trivy
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@0.0.1 uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-trivy@0.0.1
with:
version: "v0.66.0"
- name: Setup DB - name: Setup DB
uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@0.0.1 uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/setup-db@0.0.1
- name: Scan for vulnerabilities - name: Scan for vulnerabilities
setup-trivy/README.md
+4 -6
View File
@@ -10,7 +10,7 @@ A reusable Gitea Action that downloads and sets up the Trivy binary for vulnerab
- name: Setup Trivy - name: Setup Trivy
uses: your-username/trivy-actions@main/setup-trivy uses: your-username/trivy-actions@main/setup-trivy
with: with:
version: "v0.66.0" # Optional: Trivy version (default: v0.66.0) version: "v0.66.0" # Optional: Trivy version (default: latest)
``` ```
### Complete Example ### Complete Example
@@ -28,14 +28,12 @@ jobs:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- name: Setup Trivy - name: Setup Trivy
uses: your-username/trivy-actions@main/setup-trivy uses: your-username/trivy-actions@main/setup-trivy
with:
version: "v0.66.0"
- name: Scan for vulnerabilities - name: Scan for vulnerabilities
run: trivy fs . run: trivy fs .
``` ```
## Inputs ## Inputs
| Input | Description | Required | Default | | Input | Description | Required | Default |
| --------- | ----------------------------------------- | -------- | --------- | | --------- | ----------------------------------------- | -------- | -------- |
| `version` | Trivy version to download (e.g., v0.66.0) | No | `v0.66.0` | | `version` | Trivy version to download (e.g., v0.66.0) | No | `latest` |
setup-trivy/action.yaml
+15 -4
View File
@@ -9,7 +9,7 @@ inputs:
version: version:
description: "Trivy version to download (e.g., latest)" description: "Trivy version to download (e.g., latest)"
required: false required: false
default: "v0.66.0" default: "latest"
runs: runs:
using: "composite" using: "composite"
@@ -27,21 +27,32 @@ runs:
;; ;;
esac esac
echo "ARCH=$ARCH" >> $GITHUB_OUTPUT echo "ARCH=$ARCH" >> $GITHUB_OUTPUT
- name: Resolve version
shell: bash
id: version
run: |
set -e
if [ "${{ inputs.version }}" = "latest" ]; then
VERSION=$(curl -s https://api.github.com/repos/aquasecurity/trivy/releases/latest | jq -r '.tag_name')
else
VERSION="${{ inputs.version }}"
fi
echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
- name: Cache Trivy binary - name: Cache Trivy binary
id: cache-trivy id: cache-trivy
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
with: with:
path: /usr/local/bin/trivy path: /usr/local/bin/trivy
key: trivy-${{ inputs.version }}-${{ steps.arch.outputs.arch }} key: trivy-${{ steps.version.outputs.version }}-${{ steps.arch.outputs.arch }}
restore-keys: | restore-keys: |
trivy-${{ inputs.version }}-${{ steps.arch.outputs.arch }} trivy-${{ steps.version.outputs.version }}-${{ steps.arch.outputs.arch }}
- name: Download and install Trivy - name: Download and install Trivy
if: steps.cache-trivy.outputs.cache-hit != 'true' if: steps.cache-trivy.outputs.cache-hit != 'true'
shell: bash shell: bash
run: | run: |
set -e set -e
VERSION="${{ inputs.version }}" VERSION="${{ steps.version.outputs.version }}"
mkdir -p /usr/local/bin mkdir -p /usr/local/bin