elastic / cloudbeat / 10370945411

75%

push

github

Bump Trivy to v0.54.1 (#2427)

* Bump trivy to v0.49.1

* Bump trivy to v0.51.4
    - Fix registry version https://github.com/aquasecurity/trivy/pull/6219; 
    - Fix replace zap with slog https://github.com/aquasecurity/trivy/pull/6466;
        - The fix with slog used a zap to slog bridge (official from zap, but exp). It didn't have a license file, so I hardcoded a commit version that had; 
  - Adopt opts.Align() to validate options object;

* Bump trivy to v0.52.2

* Temp change the workflow trigger to test changes

* Free up space on runner

* Bump trivy to v0.53.0
  - Fix go clear cache https://github.com/aquasecurity/trivy/discussions/7010

* Bump trivy to v0.54.1
  - Fix --vuln-type flag renamed into --pkg-types https://github.com/aquasecurity/trivy/pull/7104; 
  - Adopt package relationships https://github.com/aquasecurity/trivy/pull/7237

* Rollback CI run on target

* Clean 'scan cache clean' code and add timeout to it

16 of 17 new or added lines in 3 files covered. (94.12%)

8131 of 11271 relevant lines covered (72.14%)

16.23 hits per line