Skip to content

fix: disable usless secrets scanner on trivy that was failing on big debug image layer - #25

Merged
qboileau merged 1 commit into
mainfrom
fix-ci-trivy
Aug 24, 2026
Merged

fix: disable usless secrets scanner on trivy that was failing on big debug image layer#25
qboileau merged 1 commit into
mainfrom
fix-ci-trivy

Conversation

@qboileau

Copy link
Copy Markdown
Member

No description provided.

@github-actions

Copy link
Copy Markdown

Container image CVE report

base-jre-25

Scanner Critical High Medium Low Total
Trivy ✅ 0 ✅ 0 0 0 0
Grype ✅ 0 ✅ 0 0 0 0

base-monitoring

Scanner Critical High Medium Low Total
Trivy ✅ 0 ✅ 0 3 0 3
Grype ✅ 0 🟠 1 4 0 8
Grype critical+high by component
Component Findings
go.etcd.io/etcd/client/pkg/v3 v3.5.17 1

base-os

Scanner Critical High Medium Low Total
Trivy ✅ 0 ✅ 0 0 0 0
Grype ✅ 0 ✅ 0 0 0 0

debug

Scanner Critical High Medium Low Total
Trivy ✅ 0 🟠 12 4 0 16
Grype ✅ 0 🟠 17 10 0 28
Grype critical+high by component
Component Findings
stdlib go1.25.12 12
jline-remote-telnet 3.30.4 2
golang.org/x/net v0.55.0 1
golang.org/x/text v0.37.0 1
jetty-security 12.0.34 1

Trivy counts fixed vulnerabilities only; Grype includes unfixed, so its totals run higher. Totals cover every severity, so they exceed C+H+M+L where a scanner also reports negligible or unknown. Full reports are in the workflow artifacts.

@qboileau
qboileau merged commit be767cc into main Aug 24, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants