Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Skip updating Trivy DB because of 429 issue #126

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 5 additions & 7 deletions build/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -89,13 +89,10 @@ inputs:
What container registry to use, either `acr` or `ghcr`.
If set to `acr`, credentials for Azure Container Registry will default to Elvia values.
You can also set these explictly to point to your own ACR.
If set to `ghcr`, the action will use the GitHub Container Registry.
This requires `github-token` to be set, and the `packages: write` permission.'
If set to `ghcr`, the action will use the GitHub Container Registry,
which requires the `packages: write` permission to be set for the job.
required: false
default: 'acr'
github-token:
description: 'GitHub token for GitHub Container Registry. **Required if `registry` is set to `ghcr`**. Should normally be `secrets.GITHUB_TOKEN`.'
required: false
AZURE_CLIENT_ID:
description: 'ClientId of a service principal that can push to Azure Container Registry.'
required: false
Expand Down Expand Up @@ -143,7 +140,7 @@ runs:
with:
registry: 'ghcr.io'
username: ${{ github.actor }}
password: ${{ inputs.github-token }}
password: ${{ github.token }}

- name: Setup Trivy ignore file
shell: bash
Expand Down Expand Up @@ -175,7 +172,7 @@ runs:
- name: Install 3lv CLI
uses: 3lvia/cli/setup@trunk
with:
version: '0.9.2' # TODO: remove this (which will get latest version) when 3lv CLI is stable
version: '0.11.0' # TODO: remove this (which will get latest version) when 3lv CLI is stable

- name: Handle deprecated inputs
shell: bash
Expand Down Expand Up @@ -215,6 +212,7 @@ runs:
--system-name "$SYSTEM_NAME" \
--registry "$REGISTRY" \
--scan-formats table,sarif,markdown \
--scan-skip-db-update \
--additional-tags "$ADDITIONAL_TAGS" \
--push \
'${{ inputs.name }}'
Expand Down
Loading