22 lines
636 B
YAML
22 lines
636 B
YAML
|
apiVersion: argoproj.io/v1alpha1
|
||
|
|
kind: ClusterWorkflowTemplate
|
||
|
|
metadata:
|
||
|
|
name: trivy-image-scan-template
|
||
|
|
spec:
|
||
|
|
entrypoint: trivy-image-scan
|
||
|
|
templates:
|
||
|
|
- name: trivy-image-scan
|
||
|
|
inputs:
|
||
|
|
parameters:
|
||
|
|
- name: image
|
||
|
|
container:
|
||
|
|
image: aquasec/trivy:0.56.2
|
||
|
|
command: [sh, -c]
|
||
|
|
args:
|
||
|
|
- |
|
||
|
|
set -e
|
||
|
|
|
||
|
|
TRIVY_INSECURE=true trivy image --scanners license,vuln,secret {{inputs.parameters.image}}
|
||
|
|
TRIVY_INSECURE=true trivy image --image-config-scanners secret,misconfig {{inputs.parameters.image}}
|
||
|
|
|
||
|
|
echo trivy-image-scan task completed
|