added Trivy scanners
This commit is contained in:
2
Jenkinsfile
vendored
2
Jenkinsfile
vendored
@@ -57,7 +57,7 @@ pipeline {
|
||||
// --template "@/contrib/html.tpl": Das Standard-Trivy-Layout
|
||||
// Scannt das Dateisystem auf Schwachstellen (NuGet) und Secrets
|
||||
// --exit-code 1 lässt die Pipeline bei kritischen Fehlern abbrechen
|
||||
sh 'trivy fs --exit-code 1 --severity HIGH,CRITICAL --format template --template "@/contrib/html.tpl" -o reports/trivy-report.html .'
|
||||
sh 'trivy fs -scanners vuln,secret,misconfig,license --exit-code 1 --severity HIGH,CRITICAL --format template --template "@/contrib/html.tpl" -o reports/trivy-report.html .'
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user