From 3c29cc68cc4b8101439957253d03168a60ce7475 Mon Sep 17 00:00:00 2001 From: Demonsthere Date: Fri, 25 Oct 2024 11:46:39 +0200 Subject: [PATCH] u --- .github/actions/build-and-scan/action.yaml | 3 ++- .grype.yaml | 6 +----- docker/Dockerfile | 6 +++--- 3 files changed, 6 insertions(+), 9 deletions(-) diff --git a/.github/actions/build-and-scan/action.yaml b/.github/actions/build-and-scan/action.yaml index 7cb7ab0..f5a61da 100644 --- a/.github/actions/build-and-scan/action.yaml +++ b/.github/actions/build-and-scan/action.yaml @@ -32,9 +32,10 @@ runs: tags: ${{ inputs.tags }} labels: ${{ inputs.labels }} load: true + platforms: linux/amd64,linux/arm64,darwin - name: Anchore Scanner - uses: anchore/scan-action@v3 + uses: anchore/scan-action@master if: always() id: grype-scan with: diff --git a/.grype.yaml b/.grype.yaml index 424d911..314ac13 100644 --- a/.grype.yaml +++ b/.grype.yaml @@ -1,5 +1 @@ -ignore: - # false positive: https://github.com/anchore/grype/issues/558 - - vulnerability: CVE-2015-5237 - # false positive: https://github.com/anchore/grype/issues/558 - - vulnerability: CVE-2021-22570 +ignore: [] diff --git a/docker/Dockerfile b/docker/Dockerfile index e3806de..ecf1305 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -1,9 +1,9 @@ FROM alpine:3.20 ARG USER=ory -ENV HOME /home/$USER -ENV JQ_VERSION 1.7.1 -ENV KUBECTL_VERSION 1.31.2 +ENV HOME=/home/$USER +ENV JQ_VERSION=1.7.1 +ENV KUBECTL_VERSION=1.31.2 RUN apk add --no-cache --update-cache --upgrade --latest \ ca-certificates curl netcat-openbsd coreutils bash inotify-tools procps