From 3d5d8095f5107b565cb068d803ffd374d9e06238 Mon Sep 17 00:00:00 2001 From: Sam Leeflang <57710483+samleeflang@users.noreply.github.com> Date: Thu, 31 Oct 2024 15:55:53 +0100 Subject: [PATCH] Create cache-trivy.yaml Trivy Cache --- .github/workflows/cache-trivy.yaml | 31 ++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/cache-trivy.yaml diff --git a/.github/workflows/cache-trivy.yaml b/.github/workflows/cache-trivy.yaml new file mode 100644 index 0000000..5d2082c --- /dev/null +++ b/.github/workflows/cache-trivy.yaml @@ -0,0 +1,31 @@ +name: Update Trivy Cache + +on: + schedule: + - cron: '0 0 * * *' # Run daily at midnight UTC + workflow_dispatch: # Allow manual triggering + +jobs: + update-trivy-db: + runs-on: ubuntu-latest + steps: + - name: Get current date + id: date + run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT + - name: Download and extract the Trivy vulnerability DB + run: | + mkdir -p $GITHUB_WORKSPACE/.cache/trivy/db + oras pull ghcr.io/aquasecurity/trivy-db:2 + tar -xzf db.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/db + rm db.tar.gz + - name: Download and extract the Trivy Java DB + run: | + mkdir -p $GITHUB_WORKSPACE/.cache/trivy/java-db + oras pull ghcr.io/aquasecurity/trivy-java-db:1 + tar -xzf javadb.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/java-db + rm javadb.tar.gz + - name: Cache Trivy DBs + uses: actions/cache/save@v4 + with: + path: ${{ github.workspace }}/.cache/trivy + key: cache-trivy-${{ steps.date.outputs.date }}