Comments (1)
chrisnielsen-MS
commented on June 15, 2024
I have been doing some testing and found that this scenario does work in the current setup. You can see the environment variable overrides that are supported for Trivy on this wiki page: https://github.com/microsoft/security-devops-azdevops/wiki#trivy-environment-variables
From there, the --input parameter from your initial command line appears to be causing the problem. For my tests, I set only two environment variables to get the desired behavior:
GDN_TRIVY_ACTION = 'image'
GDN_TRIVY_TARGET = 'repoName.azurecr.io/imageName:tagName'
Please give this a try and let us know if it resolves your issue.
from security-devops-azdevops.
Related Issues (20)
- Secret scanning doesn't detect any issues HOT 8
- SARIF SAST Scans Tab not showing scan results HOT 1
- Trivy scan for Buildah images fails with message: Error: unknown flag: --exit-code HOT 1
- Really poor documentation....? HOT 1
- MicrosoftSecurityDevOps@1 failing to download packages from pkgs.dev.azure.com with 403 error HOT 2
- Tool randomly requires .net 8 now? HOT 5
- task CredScan@2 Microsoft.Security.CredScan broken HOT 1
- trivy output does not match trivy@1 - Azure DevOps Pipeline HOT 1
- Can this extension be used on-prem Azure Devops Server HOT 1
- Is this project maintained? HOT 1
- Tasks show a warning on a stage in a pipeline HOT 2
- SARIF log parsing issue (v.1.9.1) HOT 3
- Task : Microsoft Security DevOps suddenly needs .net installation? HOT 2
- ADO Task unable to initialize on Azure Hosted Agent macos-13 HOT 4
- NullReferenceException: Object reference not set to an instance of an object. HOT 4
- Having issue suppressing credential scanner results with .gdnsuppress file HOT 6
- Microsoft Security Devops Issue(MicrosoftSecurityDevOps@1) HOT 5
- Task not working as expected HOT 4
- Trivy Image Scan not getting break when finding a MEDIUM or LOW vulnerability HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from security-devops-azdevops.