Skip to content

Commit 9f442ce

Browse files
authored
fix: install grype during release (#2857)
Signed-off-by: Philip Laine <[email protected]>
1 parent 913bf88 commit 9f442ce

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

.github/workflows/release.yml

+6
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,12 @@ jobs:
2626
- name: Install tools
2727
uses: ./.github/actions/install-tools
2828

29+
- name: install grype
30+
env:
31+
VERSION: v0.74.6
32+
run: "curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin $VERSION"
33+
shell: bash
34+
2935
- name: Build CLI
3036
run: |
3137
make build-cli-linux-amd

.grype.yaml

+4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
ignore:
2+
# From helm - This behavior was introduced intentionally, and cannot be removed without breaking backwards compatibility (some users may be relying on these values).
3+
# https://helm.sh/blog/response-cve-2019-25210/
4+
- vulnerability: GHSA-jw44-4f3j-q396

0 commit comments

Comments
 (0)