mirror of
https://github.com/aquasecurity/trivy-action.git
synced 2026-05-13 18:52:41 +00:00
Nikita Pivkin
74 lines
2.0 KiB
Makefile
74 lines
2.0 KiB
Makefile
OS := $(shell uname)
|
|
|
|
ifeq ($(OS), Darwin)
|
|
SED = gsed
|
|
BATS_LIB_PATH ?= /opt/homebrew/lib
|
|
else
|
|
SED = sed
|
|
BATS_LIB_PATH ?= /usr/local/lib/
|
|
endif
|
|
|
|
LOCAL_BIN := $(CURDIR)/.bin
|
|
TRIVY_INSTALL_DIR ?= $(LOCAL_BIN)
|
|
LOCAL_TRIVY := $(TRIVY_INSTALL_DIR)/trivy
|
|
|
|
ifeq ($(shell [ -f $(LOCAL_TRIVY) ] && [ -z "$(CI)" ] && echo yes),yes)
|
|
TRIVY_CMD := $(LOCAL_TRIVY)
|
|
else
|
|
TRIVY_CMD ?= trivy
|
|
endif
|
|
|
|
CACHE_DIR := '.cache'
|
|
|
|
ACTION_FILE := action.yaml
|
|
|
|
CURRENT_TRIVY_VERSION := $(shell yq '.inputs.version.default' $(ACTION_FILE) 2>/dev/null | tr -d 'v')
|
|
|
|
BATS_ENV := BATS_LIB_PATH=$(BATS_LIB_PATH) \
|
|
TRIVY_CACHE_DIR=$(CACHE_DIR) \
|
|
TRIVY_DEBUG=true
|
|
|
|
BATS_FLAGS := --timing --verbose-run test/test.bats
|
|
|
|
.PHONY: test
|
|
test:
|
|
TRIVY_CMD=$(TRIVY_CMD) $(BATS_ENV) bats $(BATS_FLAGS)
|
|
|
|
.PHONY: update-golden
|
|
update-golden:
|
|
UPDATE_GOLDEN=1 TRIVY_CMD=$(TRIVY_CMD) $(BATS_ENV) bats $(BATS_FLAGS)
|
|
|
|
.PHONY: clean-cache
|
|
clean-cache:
|
|
$(TRIVY_CMD) clean --scan-cache --cache-dir $(CACHE_DIR)
|
|
|
|
.PHONY: check-yq
|
|
check-yq:
|
|
@command -v yq >/dev/null 2>&1 || (echo "yq is required but not installed. Install it from https://github.com/mikefarah/yq"; exit 1)
|
|
|
|
bump-trivy: check-yq
|
|
@[ $$NEW_VERSION ] || ( echo "env 'NEW_VERSION' is not set"; exit 1 )
|
|
@echo Current version: $(CURRENT_TRIVY_VERSION) ;\
|
|
echo New version: $$NEW_VERSION ;\
|
|
$(SED) -i -e "s/$(CURRENT_TRIVY_VERSION)/$$NEW_VERSION/g" \
|
|
README.md $(ACTION_FILE)
|
|
|
|
.PHONY: ensure-trivy
|
|
ensure-trivy: check-yq
|
|
@set -e; \
|
|
mkdir -p $(TRIVY_INSTALL_DIR); \
|
|
if [ -x $(LOCAL_TRIVY) ]; then \
|
|
CURRENT_VERSION="$$( $(LOCAL_TRIVY) version -f json | jq -r '.Version' )"; \
|
|
else \
|
|
CURRENT_VERSION=none; \
|
|
fi; \
|
|
echo "Required: $(CURRENT_TRIVY_VERSION)"; \
|
|
echo "Current: $$CURRENT_VERSION"; \
|
|
if [ "$$CURRENT_VERSION" != "$(CURRENT_TRIVY_VERSION)" ]; then \
|
|
echo "Installing Trivy $(CURRENT_TRIVY_VERSION) locally..."; \
|
|
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | \
|
|
sh -s -- -b $(TRIVY_INSTALL_DIR) v$(CURRENT_TRIVY_VERSION); \
|
|
else \
|
|
echo "Trivy $(CURRENT_TRIVY_VERSION) already present."; \
|
|
fi
|