21 lines
550 B
YAML
21 lines
550 B
YAML
|
apiVersion: argoproj.io/v1alpha1
|
||
|
|
kind: ClusterWorkflowTemplate
|
||
|
|
metadata:
|
||
|
|
name: trivy-filesystem-scan-template
|
||
|
|
spec:
|
||
|
|
entrypoint: trivy-filesystem-scan
|
||
|
|
templates:
|
||
|
|
- name: trivy-filesystem-scan
|
||
|
|
container:
|
||
|
|
image: aquasec/trivy:0.56.2
|
||
|
|
command: [sh, -c]
|
||
|
|
args:
|
||
|
|
- |
|
||
|
|
set -e
|
||
|
|
|
||
|
|
trivy fs --scanners license,vuln,misconfig,secret /shared-data/repo
|
||
|
|
|
||
|
|
echo trivy-filesystem-scan task completed
|
||
|
|
volumeMounts:
|
||
|
|
- name: shared-data
|
||
|
|
mountPath: /shared-data
|