-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: determine the correct Docker socket from the context #982
Conversation
Trivy Scan Reportghcr.io/automattic/vip-container-images/alpine:3.20.3 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/nginx:1.27.2 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/photon:latest (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/traefik_openssl:v3 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/dev-tools:0.9 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.2 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/traefik_openssl:latest (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.4 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/skeleton:latest (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.3 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.7 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:trunk (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.0 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.1 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.5 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/wordpress:6.6 (alpine 3.20.3)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/php-fpm:8.1 (ubuntu 24.04)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/php-fpm:8.2 (ubuntu 24.04)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/php-fpm:8.4 (ubuntu 24.04)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/php-fpm:8.3 (ubuntu 24.04)No vulnerabilities found. |
Trivy Scan Reportghcr.io/automattic/vip-container-images/mu-plugins:0.1 (alpine 3.20.3)No vulnerabilities found. |
We pass the wrong socket to Trivy. The
crazy-max/ghaction-setup-docker
action creates its own context with a different socket. We get incorrect results because we pass/var/run/docker.sock
.