Fix the Trivy scanner (#504)

* Update CI.yml * Update CI.yml * Update base.Dockerfile * Update CI.yml * Update CI.yml * Update base.Dockerfile
Azure · Oct 25, 2024 · 5142a03 · 5142a03
1 parent aa22eb7
commit 5142a03
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
@@ -43,14 +43,13 @@ jobs:
 
       - name: Create temporary trivy directories
         run: |
-          sudo mkdir $GITHUB_WORKSPACE/trivy-tmp
-          sudo mkdir $GITHUB_WORKSPACE/trivy-tmp/.cache
+          mkdir -p $GITHUB_WORKSPACE/trivy-tmp/.cache
           echo "TMPDIR=$GITHUB_WORKSPACE/trivy-tmp" >> $GITHUB_ENV
           echo "TRIVY_CACHE_DIR=$GITHUB_WORKSPACE/trivy-tmp/.cache" >> $GITHUB_ENV
 
       - name: Scan base image with Trivy
         id: trivy-base-scan
-        uses: aquasecurity/trivy-action@0.20.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           scan-type: 'image'
           image-ref: base_cloudshell
@@ -64,7 +63,7 @@ jobs:
 
       - name: Scan Tools image with Trivy
         id: trivy-tools-scan
-        uses: aquasecurity/trivy-action@0.20.0
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           scan-type: 'image'
           image-ref: tools_cloudshell