devops/demo-app
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: Trivy ignorefile ko DooD host path se mount karo

Browse Source
This commit is contained in:
devops 2026-09-16 14:00:49 +00:00
parent 8e8c8b086c
commit 2122ef2437
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Jenkinsfile vendored
View File

@ -124,10 +124,12 @@ print(' Vault se registry creds mil gaye (user=%s)' % d['username'])
sh ''' sh '''
# GATE hai, report nahi: HIGH/CRITICAL mila to build yahin fail hogi. # GATE hai, report nahi: HIGH/CRITICAL mila to build yahin fail hogi.
# Jo CVE business ne accept kiye hain wo .trivyignore me hain. # Jo CVE business ne accept kiye hain wo .trivyignore me hain.
# DooD: docker daemon host ka hai, isliye workspace ka host path chahiye.
HOST_WS=$(echo "$PWD" | sed "s|^${JENKINS_HOME_CONTAINER}|${JENKINS_HOME_HOST}|")
docker run --rm \ docker run --rm \
-v /var/run/docker.sock:/var/run/docker.sock \ -v /var/run/docker.sock:/var/run/docker.sock \
-v trivy-cache:/root/.cache/ \ -v trivy-cache:/root/.cache/ \
-v "$PWD/.trivyignore:/.trivyignore:ro" \ -v "$HOST_WS/.trivyignore":/.trivyignore:ro \
aquasec/trivy:0.58.1 image \ aquasec/trivy:0.58.1 image \
--severity ${TRIVY_SEVERITY} \ --severity ${TRIVY_SEVERITY} \
--ignore-unfixed \ --ignore-unfixed \