Verify the Trivy image on a real docker host #9

New issue

Open

opened 2026-07-10 13:15:50 +02:00 by qwc · 0 comments

qwc commented

2026-07-10 13:15:50 +02:00

Owner

Labels: demo, packaging, needs-verification
Priority: medium

The Dockerfile bakes trivy v0.58.1 + a pre-warmed DB but has not been built in the sandbox (no docker there).

docker build succeeds; DB pre-warm step works offline at runtime
Bump the pinned Trivy version if the asset URL/DB format changed
A real trivy deep scan produces a match end-to-end

**Labels:** `demo`, `packaging`, `needs-verification` **Priority:** medium The Dockerfile bakes `trivy` v0.58.1 + a pre-warmed DB but has **not been built in the sandbox** (no docker there). - [ ] `docker build` succeeds; DB pre-warm step works offline at runtime - [ ] Bump the pinned Trivy version if the asset URL/DB format changed - [ ] A real `trivy` deep scan produces a match end-to-end

qwc added the

labels

2026-07-10 13:52:45 +02:00