This commit is contained in:
g_it 2026-02-10 23:51:28 +01:00
commit 7471b48794
Signed by untrusted user who does not match committer: g_it
GPG key ID: A2B0A7C06A054627

View file

@ -28,7 +28,7 @@ trap cleanup EXIT INT TERM
# Trivy check for vulnerabilities in dependencies
if command -v trivy &>/dev/null; then
echo -e "${GREEN}Running Trivy scan...${NC}"
trivy fs --ignorefile .trivyignore . --exit-code 1 --severity CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN --no-progress \
trivy fs --ignorefile .trivyignore . --exit-code 1 --severity CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN --no-progress --scanners vuln \
>"$LOG_DIR/trivy.log" 2>&1 || { echo -e "${RED}Trivy failed. See $LOG_DIR/trivy.log${NC}"; exit 1; }
else
echo -e "${YELLOW}Trivy not installed. Skipping vulnerability scan.${NC}"