mirror of
https://github.com/datahub-project/datahub.git
synced 2025-12-16 04:28:01 +00:00
fix(ci): adjust trivy configuration for pyspark cache (#14692)
This commit is contained in:
parent
fa4c866d0b
commit
8b194cdd28
1
.github/workflows/docker-unified.yml
vendored
1
.github/workflows/docker-unified.yml
vendored
@ -337,6 +337,7 @@ jobs:
|
|||||||
severity: "CRITICAL,HIGH"
|
severity: "CRITICAL,HIGH"
|
||||||
ignore-unfixed: true
|
ignore-unfixed: true
|
||||||
vuln-type: "os,library"
|
vuln-type: "os,library"
|
||||||
|
trivy-config: "./trivy.yaml"
|
||||||
- name: Upload Trivy scan results to GitHub Security tab
|
- name: Upload Trivy scan results to GitHub Security tab
|
||||||
uses: github/codeql-action/upload-sarif@v3
|
uses: github/codeql-action/upload-sarif@v3
|
||||||
with:
|
with:
|
||||||
|
|||||||
4
trivy.yaml
Normal file
4
trivy.yaml
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
scan:
|
||||||
|
skip-dirs:
|
||||||
|
# Skip Python uv cache directories to avoid duplicate vulnerability reports in upstreams
|
||||||
|
- "/home/datahub/.cache/uv/**/pyspark/jars/**"
|
||||||
Loading…
x
Reference in New Issue
Block a user