ci-images/tmf-ci-trivy (sha256:f9946cb6ee945a6942b0fa09558f2c704d7365d7c79e949cb3a9e2d697f55990)

Published 2026-11-01 00:13:45 -03:00 by tarcisio

Pull the image from the command line:

docker pull git.trademarketingforce.com/tmf/ci-images/tmf-ci-trivy@sha256:f9946cb6ee945a6942b0fa09558f2c704d7365d7c79e949cb3a9e2d697f55990

Digest

sha256:f9946cb6ee945a6942b0fa09558f2c704d7365d7c79e949cb3a9e2d697f55990

For more information on the Container registry, see the documentation.

CVE scanner (Trivy) compartilhado + DB baked offline — gate de segurança CI TMF/DANI

ADD alpine-minirootfs-3.23.6-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

ARG TARGETARCH=amd64

ARG TRIVY_VERSION=0.74.0

ARG TRIVY_TARBALL_SHA256=2ae6fe3ee734b7fdf11335663e18c75ea12dccc76062f09f164a3b0f8be4371a

ARG TRIVY_BIN_SHA256=d89bcc6510a267f11b773398cbf1be5520ce39f9e8b6633178c4487f05b7d791

ARG TRIVY_TARBALL_URL=https://git.trademarketingforce.com/api/packages/TMF/generic/trivy-cli/0.74.0/trivy_0.74.0_Linux-64bit.tar.gz

RUN |5 TARGETARCH=amd64 TRIVY_VERSION=0.74.0 TRIVY_TARBALL_SHA256=2ae6fe3ee734b7fdf11335663e18c75ea12dccc76062f09f164a3b0f8be4371a TRIVY_BIN_SHA256=d89bcc6510a267f11b773398cbf1be5520ce39f9e8b6633178c4487f05b7d791 TRIVY_TARBALL_URL=https://git.trademarketingforce.com/api/packages/TMF/generic/trivy-cli/0.74.0/trivy_0.74.0_Linux-64bit.tar.gz /bin/sh -c set -eu; [ "${TARGETARCH:-amd64}" = "amd64" ] || { echo "tmf-ci-trivy só tem tarball amd64 pinado (TARGETARCH=${TARGETARCH})" >&2; exit 1; }; apk add --no-cache ca-certificates git; apk add --no-cache --virtual .baixar curl; printf 'user = "%s"\n' "$(cat /run/secrets/forgejo_auth)" | curl -fsSL --proto '=https' -K - -o /tmp/trivy.tgz "${TRIVY_TARBALL_URL}"; echo "${TRIVY_TARBALL_SHA256} /tmp/trivy.tgz" | sha256sum -c -; tar -xzf /tmp/trivy.tgz -C /usr/local/bin trivy; rm -f /tmp/trivy.tgz; apk del .baixar; echo "${TRIVY_BIN_SHA256} /usr/local/bin/trivy" | sha256sum -c -; trivy --version | grep -q "Version: ${TRIVY_VERSION}" # buildkit

ARG BUILD_DATE=2026-11-01T03:12:07Z

ARG VERSION=0.74.0

ENV TRIVY_CACHE_DIR=/opt/trivy-cache

ARG TRIVY_DB_BUST=1793502727

RUN |8 TARGETARCH=amd64 TRIVY_VERSION=0.74.0 TRIVY_TARBALL_SHA256=2ae6fe3ee734b7fdf11335663e18c75ea12dccc76062f09f164a3b0f8be4371a TRIVY_BIN_SHA256=d89bcc6510a267f11b773398cbf1be5520ce39f9e8b6633178c4487f05b7d791 TRIVY_TARBALL_URL=https://git.trademarketingforce.com/api/packages/TMF/generic/trivy-cli/0.74.0/trivy_0.74.0_Linux-64bit.tar.gz BUILD_DATE=2026-11-01T03:12:07Z VERSION=0.74.0 TRIVY_DB_BUST=1793502727 /bin/sh -c echo "trivy-db bust: ${TRIVY_DB_BUST}" && trivy --cache-dir "$TRIVY_CACHE_DIR" image --download-db-only --no-progress && chmod -R a+rX "$TRIVY_CACHE_DIR" && trivy --cache-dir "$TRIVY_CACHE_DIR" version --format json # buildkit

LABEL org.opencontainers.image.title=tmf-ci-trivy org.opencontainers.image.description=CVE scanner (Trivy) compartilhado + DB baked offline — gate de segurança CI TMF/DANI org.opencontainers.image.version=0.74.0 org.opencontainers.image.created=2026-11-01T03:12:07Z

ENTRYPOINT ["trivy"]

Key	Value
org.opencontainers.image.created	2026-11-01T03:12:07Z
org.opencontainers.image.description	CVE scanner (Trivy) compartilhado + DB baked offline — gate de segurança CI TMF/DANI
org.opencontainers.image.title	tmf-ci-trivy
org.opencontainers.image.version	0.74.0