feat: support for ca cert in trivy (#5064)

* trivy ca cert sql migration * sql no update * sql no update
devtron-labs · May 18, 2024 · 5a75ad9 · 5a75ad9
1 parent 0eea3f5
commit 5a75ad9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/scripts/sql/247_trivy_ca_cert_support.down.sql b/scripts/sql/247_trivy_ca_cert_support.down.sql
@@ -0,0 +1,3 @@
+UPDATE public.scan_tool_step
+SET cli_command = 'trivy image -f json -o {{.OUTPUT_FILE_PATH}} --timeout {{.timeout}} {{.IMAGE_NAME}} --username {{.USERNAME}} --password {{.PASSWORD}}'
+WHERE id = 1;
diff --git a/scripts/sql/247_trivy_ca_cert_support.up.sql b/scripts/sql/247_trivy_ca_cert_support.up.sql
@@ -0,0 +1,4 @@
+UPDATE public.scan_tool_step
+SET cli_command = '{{if .CA_CERT_FILE_PATH}} SSL_CERT_FILE={{.CA_CERT_FILE_PATH}} {{end}} trivy {{if .insecure}} --insecure {{end}} image -f json -o {{.OUTPUT_FILE_PATH}} --timeout {{.timeout}} {{
+.IMAGE_NAME}} --username {{.USERNAME}} --password {{.PASSWORD}}'
+WHERE id = 1;