From a253a206827771e00b91f5ea2c23b4cf50edd0df Mon Sep 17 00:00:00 2001 From: Sakshi Makkar Date: Fri, 18 Mar 2022 00:56:11 +0530 Subject: [PATCH] trivy check removed to avoid build failure --- Dockerfile.podman | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/Dockerfile.podman b/Dockerfile.podman index 78e78afa..2c1978d5 100644 --- a/Dockerfile.podman +++ b/Dockerfile.podman @@ -29,21 +29,6 @@ RUN microdnf update -y && \ COPY --from=builder /go/src/csi-isilon / ENTRYPOINT ["/csi-isilon"] -# Stage to check for critical and high CVE issues via Trivy (https://github.com/aquasecurity/trivy) -# will break image build if CRITICAL issues found -# will print out all HIGH issues found -FROM driver as cvescan -COPY ./.trivyignore . -# run trivy and clean up all traces after -RUN microdnf install -y --enablerepo=ubi-8-baseos tar && \ - microdnf clean all && \ - curl https://raw.githubusercontent.com/aquasecurity/trivy/master/contrib/install.sh | sh && \ - trivy fs -s CRITICAL --exit-code 1 / && \ - trivy fs -s HIGH / && \ - trivy image --reset && \ - rm ./bin/trivy && \ - rm ./.trivyignore - # final stage # simple stage to use the driver image as the resultant image FROM driver as final