kubeflow / trainer

52%

master: 55%

LAST BUILD ON BRANCH trivy-scans

branch: trivy-scans

CHANGE BRANCH

x

Reset

Sync Branches

• trivy-scans
• 2836-expose-builruntimeinfo
• KEP-volcano-scheduler
• add-gitattr
• add-license-scan-badge
• add-local-example
• add-local-trainer-client
• add-local-trainer-example
• add-ok-to-test
• add-overlay-manifest-v2
• add-pod-network-plugin-to-diagram
• add-qwen3-1.7b
• add-runtime-labels
• add-sdk-release
• add-standalone-manifest
• automate-release
• bo/feat/remove-launcher-chainer-validation
• bo/test/add-ut-for-torch-runtime-valid
• bump-jobset-v0.9.0
• bump-torch-deepspeed
• cache-oss
• cache_initilizer
• changelog-1.9.1
• changelog-2.0.0
• changelog-2.0.1
• changelog-v2.0.0-rc.0
• changelog-v2.0.0-rc.1
• cherry-pick-2666-to-release-2.0
• cherry-pick-2675-to-release-2.0
• cherry-pick-2682-to-release-2.0
• cherry-pick-2683-to-release-2.0
• cherry-pick-2685-to-release-2.0
• cherry-pick-2686-to-release-2.0
• cherry-pick-2691-to-release-2.0
• cherry-pick-2695-to-release-2.0
• cherry-pick-2700-to-release-2.0
• cherry-pick-2703-to-release-2.0
• cherry-pick-2707-to-release-2.0
• cherry-pick-2719-to-release-2.0
• cherry-pick-2726-to-release-2.0
• cherry-pick-2731-to-release-2.0
• cherry-pick-2734-to-release-2.0
• cherry-pick-2739-to-release-2.0
• cherry-pick-2761
• cherry-pick-2766
• cherry-pick-2771-to-release-2.0
• cherry-pick-2774-to-release-2.0
• cherry-pick-2780
• cherry-pick-2813
• cherry-pick-2815
• cherry-pick-2837-to-release-2.0
• cherry-pick-2854-to-release-2.0
• cherry-pick-changelog-1.9
• chore/KEP-runtime-class
• chore/gha
• chore/merge-podspacoverride-test-cases
• chore/upgrade-torchtune-version
• ci/include-1.32-k8s
• coscheduling-indexers-ut
• deepspeed-runtime
• dependabot/cargo/pkg/data_cache/crossbeam-channel-0.5.15
• dependabot/cargo/pkg/data_cache/ring-0.17.14
• dependabot/cargo/pkg/data_cache/test/tracing-subscriber-0.3.20
• dependabot/cargo/pkg/data_cache/tokio-1.44.2
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/oauth2-0.27.0
• dependabot/pip/cmd/runtimes/deepspeed/torch-2.6.0
• dependabot/pip/cmd/runtimes/deepspeed/torch-2.7.1
• dependabot/pip/cmd/runtimes/deepspeed/torch-2.8.0
• dependabot/pip/cmd/runtimes/deepspeed/transformers-4.51.0
• dependabot/pip/cmd/runtimes/deepspeed/transformers-4.52.1
• dependabot/pip/cmd/runtimes/deepspeed/transformers-4.53.0
• dont-merge-gpu-label-test
• example/trainjob-yaml
• feat/add-coscheduling-uts
• feat/ctr-webhook
• feat/dataset-preprocess
• feat/example/add-speech-recognition-with-ddp-example
• feat/initializers/s3
• feat/llama3_2-manifests
• feat/llm-trainer-v2
• feat/local-model
• feat/lora-support
• feat/pvc-check
• feat/replica-valid
• feat/sdk-torchtune-config
• feat/torchtune-plugin
• feat/trainjob-affinity
• feat/trainjob-imagepullsecrets
• feat/webhook-validate-trainjob-name
• feat/webhook/rfc1035
• feature/add-xgboost-runtime
• feature/debabrata
• feature/helm-charts-v2
• fix-arg-for-get-args-using-torchtune-config
• fix-close-pr-message
• fix-controller-rbac
• fix-coveralls
• fix-deepspeed-example
• fix-deepspeed-npoc
• fix-example-runtime
• fix-latest-tag
• fix-llm-hp-optimization-error
• fix-mpi-key-mode
• fix-oci-vm-tf
• fix-outdated-intstr-lib
• fix-permissions
• fix-release-doc
• fix-resource-allocation
• fix-test-bug
• fix-trainer-type-annotation
• fix/cert-and-issuer
• fix/disable-github-actions
• fix/issue-template
• fix/kep2401-lint
• fix/multiple-depends-on
• fix/python-type-import
• fix/rbac/event
• fix/tidy-KEP-2401
• fix/torchtune-plugin
• gpu-test-on-pr
• gsoc-2442-jax-runtime-proposal
• gsoc25-project7-kep
• hatchling-package
• helm-integration-tests
• implement-resource-in-use-finalizer
• implement-resource-in-use-for-cl-training-runtime
• implement-validation-uts
• indexers-ut
• issue-2218-pod-spec-override-kep
• issue-2706-v2-go-mod
• issue-2789/implement-cluster-training-runtimes-deprecation-process
• jax-runtime
• jobset-name-prefix
• jobset-validation
• k8s_1.32_upgrade
• kai_kep
• kubecon-london-demo
• kubelow-sdk-release
• master
• mlx-cuda-runtime
• mlx-runtime
• obtain-runtimeTemplate-via-info
• openssf-badge
• override_label_and_annotation
• patch-1
• pick/example-alpaca
• pick/fix-torchtune-plugin
• pkg/apply_unit-tests
• pr-15
• pr-17
• pr-18
• pr-19
• pr-20
• pr-21
• pr-22
• pr-24
• pr-25
• pr-26
• pr-27
• pr-28
• pr-29
• pr-30
• pr-created-condition
• pr-k8s-lint
• pr-title-workflow
• prometheus
• refs/tags/v1.9.1
• refs/tags/v2.0.0-rc.0
• refs/tags/v2.0.0-rc.1
• refs/tags/v2.0.1
• release-1.9
• release-2.0
• release-python-doc
• remove-command-runtimes
• remove-k8s-version-matrix
• remove-mpi
• remove-sdk
• remove-vendor-specific-parameters
• revert-2646-fix-trainer-type-annotation
• roadmap-2025
• rqst-env-only-if-label-present
• runtime_fix
• safe-gpu-test
• scorecard-workflow
• sdk-ancestor-updates
• sdk-fix-mpirun
• security-doc
• separate-models-from-sdk
• solanyn/question-answer-example
• support-for-gpu-cluster-using-oci-runner
• support_kai
• terrytangyuan-patch-1
• test/fix-flaky-test
• tmp_secret_verify
• training-progression#2779
• treat-ancestor-label-as-identifier
• update-approvers
• update-examples-with-unpacking-params
• update-github-runners
• update-image-tags
• update-license
• update-logs-examples
• update-manifest-images-to-ghcr
• update-owners
• update-release-process
• update-sdk-reference
• update-security-context
• update-slack
• update-stale-bot-version
• use-tilt
• validation-mpiruntimes
• volcano-podgroup-build
• vzamboulingame-upgrade-go-v1.24
• workflow/helm
• workflow/publish-helm-charts

Build # 17622263280

Build Type

Pull #2826

github

Committed by andreyvelich

Commit Message

feat(ci): Add Trivy Vulnerability Scan

Signed-off-by: Andrey Velichkevich <andrey.velichkevich@gmail.com>

Pull Request Pull Request #2826: feat(ci): Add Trivy Vulnerability Scan

Run Details

1025 of 1966 relevant lines covered (52.14%)

0.62 hits per line