fixed trivy scanners option
All checks were successful
Tests / Declarative: Post Actions passed: 1
csharp-secdevops-pipeline-pod/pipeline/head This commit looks good

This commit is contained in:
2026-05-06 11:51:08 +02:00
parent f6736d2f31
commit 6b52e54ef1

2
Jenkinsfile vendored
View File

@@ -57,7 +57,7 @@ pipeline {
// --template "@/contrib/html.tpl": Das Standard-Trivy-Layout
// Scannt das Dateisystem auf Schwachstellen (NuGet) und Secrets
// --exit-code 1 lässt die Pipeline bei kritischen Fehlern abbrechen
sh 'trivy fs -scanners vuln,config --exit-code 1 --severity HIGH,CRITICAL --format template --template "@/contrib/html.tpl" -o reports/trivy-report.html .'
sh 'trivy fs --scanners vuln,misconfig,secret,license --exit-code 1 --severity HIGH,CRITICAL --format template --template "@/contrib/html.tpl" -o reports/trivy-report.html .'
}
}
}