From 93d21d75ab22826673b35a775470615077f97c4d Mon Sep 17 00:00:00 2001 From: Suyash Jain Date: Sun, 11 Jan 2026 02:10:47 +0530 Subject: [PATCH 1/2] ci: cache Trivy vulnerability database for repo and filesystem scans --- .github/workflows/run-ci-cd.yaml | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/.github/workflows/run-ci-cd.yaml b/.github/workflows/run-ci-cd.yaml index 7cd811eb08..378d245539 100644 --- a/.github/workflows/run-ci-cd.yaml +++ b/.github/workflows/run-ci-cd.yaml @@ -134,13 +134,18 @@ jobs: - name: Check out repository uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 + - name: Setup Trivy + uses: aquasecurity/setup-trivy@e6c2c5e321ed9123bda567646e2f96565e34abe1 + with: + cache: true + - name: Run Trivy Repository Scan uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 with: scan-type: repo + skip-setup-trivy: true trivy-config: trivy.yaml trivyignores: trivyignore.yaml - version: latest scan-ci-dependencies: name: Run CI Dependencies Scan @@ -155,13 +160,18 @@ jobs: - name: Check out repository uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 + - name: Setup Trivy + uses: aquasecurity/setup-trivy@e6c2c5e321ed9123bda567646e2f96565e34abe1 + with: + cache: true + - name: Run Trivy Filesystem Scan uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 with: scan-type: fs + skip-setup-trivy: true trivy-config: trivy.yaml trivyignores: trivyignore.yaml - version: latest run-backend-tests: name: Run backend tests From f8dc4a0f7d63744fa403bed70b49e43e7f29adcf Mon Sep 17 00:00:00 2001 From: Arkadii Yakovets Date: Sat, 10 Jan 2026 14:08:26 -0800 Subject: [PATCH 2/2] Update code --- .github/workflows/run-ci-cd.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/run-ci-cd.yaml b/.github/workflows/run-ci-cd.yaml index 378d245539..4277a4a558 100644 --- a/.github/workflows/run-ci-cd.yaml +++ b/.github/workflows/run-ci-cd.yaml @@ -783,7 +783,6 @@ jobs: uses: aquasecurity/setup-trivy@e6c2c5e321ed9123bda567646e2f96565e34abe1 with: cache: true - version: v0.62.1 - name: Scan backend image continue-on-error: true