chore(ci): Remove trivy - Manifests#3424
Conversation
Signed-off-by: Surya Sameer Datta Vaddadi <f20220373@goa.bits-pilani.ac.in>
|
Welcome to the Kubeflow Manifests Repository Thanks for opening your first PR. Your contribution means a lot to the Kubeflow community. Before making more PRs: Community Resources:
Thanks again for helping to improve Kubeflow. |
There was a problem hiding this comment.
Pull request overview
This PR removes the GitHub Actions workflow that performed image extraction and Trivy-based vulnerability scanning for the kubeflow/manifests repository, aligning with the referenced instruction to drop this action.
Changes:
- Deleted
.github/workflows/trivy.yaml, removing the CI job that installed kustomize/trivy/python and rantests/trivy_scan.py. - Eliminated artifact upload of
trivy_scanned_resultsfrom CI.
|
Hello, this action is self-written. Why do you want to remove it ? Is the binary affected ? |
|
/hold |
@juliusvonkohout Please check the Slack security thread. |
Signed-off-by: Surya Sameer Datta Vaddadi <f20220373@goa.bits-pilani.ac.in>
|
/lgtm |
|
/unhold |
|
/hold |
|
Ok but as discussed with the cncf supply chain guy |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: juliusvonkohout The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Removing trivy action - as instructed by @andreyvelich following kubeflow/katib#2644