From be1855defb9368ee6a8d4cc6664ccaab6c00f904 Mon Sep 17 00:00:00 2001 From: Marko Bencun Date: Fri, 11 Oct 2024 09:42:59 +0200 Subject: [PATCH] ci: remove trivy It has been failing with random errors way too often which is distracting: > 2024-10-11T07:40:25Z FATAL Fatal error init error: DB error: failed to download vulnerability DB: database download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-db/blobs/sha256:d5984d994db8053be4c3cb88a0358784726280ff174ad24bb84b92138b8f4acb: TOOMANYREQUESTS: retry-after: 1.021981ms, It also does not seem to help much beyond the builtin GH security scans. --- .github/workflows/trivy.yml | 23 ----------------------- 1 file changed, 23 deletions(-) delete mode 100644 .github/workflows/trivy.yml diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml deleted file mode 100644 index bf11e1a902..0000000000 --- a/.github/workflows/trivy.yml +++ /dev/null @@ -1,23 +0,0 @@ -name: trivy check -on: - pull_request: - branches: - - master - push: - branches: - - master -jobs: - trivy: - runs-on: ubuntu-22.04 - steps: - - name: Checkout code - uses: actions/checkout@v4 - - name: Run Trivy - uses: aquasecurity/trivy-action@0.24.0 - with: - format: 'table' - ignore-unfixed: true - scan-type: 'fs' - exit-code: '1' - severity: 'MEDIUM,HIGH,CRITICAL' -