chore(scripts): create a script to check trivy

Opetushallitus · Jan 8, 2025 · 80b44d2 · 80b44d2
1 parent a9e2b6c
commit 80b44d2
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/scripts/run_trivy.sh b/scripts/run_trivy.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+source "$( dirname "${BASH_SOURCE[0]}" )/common-functions.sh"
+
+repo="https://github.com/Opetushallitus/koto-rekisteri"
+reportDir="temp"
+repoName="koto-rekisteri"
+trivyImage=aquasec/trivy:latest
+
+docker pull ${trivyImage}
+
+docker run --rm \
+  --volume trivy-cache:/trivy-cache \
+  --volume ${reportDir}:/reports \
+  ${trivyImage} \
+  repo ${repo} \
+  --cache-dir /trivy-cache \
+  --scanners vuln \
+  --format json \
+  --output /reports/${repoName}_trivy.json