File tree Expand file tree Collapse file tree 2 files changed +5
-1
lines changed Expand file tree Collapse file tree 2 files changed +5
-1
lines changed Original file line number Diff line number Diff line change @@ -323,6 +323,7 @@ jobs:
323
323
- name : Scan Images for Vulnerabilities
324
324
shell : bash
325
325
run : |
326
+ INSTALLER_IMAGE_BASE_REPO=$"{{ needs.configuration.outputs.image_repo_base }}""
326
327
./scripts/trivy/trivy-scan-images.sh ${{ needs.configuration.outputs.version }} CRITICAL
327
328
328
329
install-app :
Original file line number Diff line number Diff line change @@ -15,6 +15,8 @@ if [[ $# -lt 2 ]]; then
15
15
exit 1
16
16
fi
17
17
18
+ INSTALLER_IMAGE_BASE_REPO=" ${INSTALLER_IMAGE_BASE_REPO:- eu.gcr.io/ gitpod-dev-artifact} "
19
+
18
20
# Extract VERSION and FAIL_ON from arguments and remove them from args list
19
21
VERSION=" $1 "
20
22
FAIL_ON=" $2 "
@@ -52,8 +54,9 @@ if ! command -v "$TRIVY_CMD" &> /dev/null; then
52
54
fi
53
55
54
56
echo " === Gathering list of all images for $VERSION "
57
+
55
58
# Run the installer docker image to get the list of images
56
- docker run --rm -v " $CONFIG_DIR :/config" eu.gcr.io/gitpod-core-dev/ build/installer:" ${VERSION} " mirror list \
59
+ docker run --rm -v " $CONFIG_DIR :/config" " $INSTALLER_IMAGE_BASE_REPO / build/installer:${VERSION} " mirror list \
57
60
-c " /config/$INSTALLER_CONFIG_FILE " > " $SCAN_DIR /mirror.json"
58
61
59
62
# Extract original image references
You can’t perform that action at this time.
0 commit comments