update trellix scan (opea-project#18)

Signed-off-by: chensuyue <[email protected]>
poussa · Apr 30, 2024 · 00a7cc2 · 00a7cc2
1 parent 3a9a3de
commit 00a7cc2
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/scripts/codeScan/trellix.sh b/.github/workflows/scripts/codeScan/trellix.sh
@@ -45,8 +45,10 @@ echo "Extracting latest defs..." \
 echo "--- Scanning ---"
 ENV_SCAN_OPTS="--analyze --mime --program --recursive --unzip --threads 4 --summary --verbose --html=${workspace}/.github/workflows/scripts/codeScan/report.html"
 echo "Scan Options: $ENV_SCAN_OPTS"
-uvscan $ENV_SCAN_OPTS ${workspace} 2>&1 | tee ${log_dir}/trellix.log
 
+rm -r ${workspace}/avvdat*
+rm -r ${workspace}/.git
+uvscan $ENV_SCAN_OPTS ${workspace} 2>&1 | tee ${log_dir}/trellix.log
 
 if [[ $(grep "Possibly Infected" ${log_dir}/trellix.log | sed 's/[^0-9]//g') != 0 ]]; then
     $BOLD_RED && echo "Error!! Please Click on the artifact button to download and check error details." && $RESET

diff --git a/.github/workflows/trellix.yml b/.github/workflows/trellix.yml
@@ -23,6 +23,9 @@ jobs:
   Trellix:
     runs-on: trellix
     steps:
+      - name: Clean Up Working Directory
+        run: sudo rm -rf ${{github.workspace}}/*
+
       - name: Checkout out Repo
         uses: actions/checkout@v4