ci: ignore false-positive 3rd party lockfiles for trivy

- uses newly released `--skip-dirs` flag of Trivy 0.11.0
2020-08-30 11:34:26 +02:00 · 2020-08-30 11:34:26 +02:00 · 5b332d8f57
parent 0de5078d9d
commit 5b332d8f57
1 changed files with 1 additions and 1 deletions
--- a/.github/workflows/vulnscan.yml
+++ b/.github/workflows/vulnscan.yml
@ -34,7 +34,7 @@ jobs:
          for image in $ALL_IMAGES; do
            if [[ "$image" = cmur2/dyndnsd:v$major_version.* ]]; then
              echo -e "\nScanning newest patch release $image of major v$major_version...\n"
-              if ! trivy image --skip-update --exit-code 1 "$image"; then
+              if ! trivy image --skip-update --exit-code 1 --skip-dirs '/usr/lib/ruby/gems/2.7.0/gems/jaeger-client-0.10.0/crossdock' "$image"; then
                EXIT_CODE=1
              fi
              break