Skip to content

Make scan-local target to run from an image instead of a directory #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sergicastro merged 3 commits into from
Feb 11, 2026
Merged

Make scan-local target to run from an image instead of a directory #73

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
990f8d0
Make `scan-local` target to run from an image instead of a directory
sergicastro Feb 10, 2026
8bb8879
Remove duplciated action
sergicastro Feb 10, 2026
de59018
Update Makefile
sergicastro Feb 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,12 +122,12 @@ docker-build/%: DOCKER_ARCH=$(notdir $(PLATFORM))
docker-build/%: docker-buildx ## Build docker image with ARCH as image tag suffix.
docker buildx build --builder $(DOCKER_BUILDER_NAME) --platform ${PLATFORM} -t ${IMG}-${DOCKER_ARCH} --load .

# If your using other Docker engines like OrbStack you may have Grype failing due to image not found.
# Export the `DOCKER_HOST=unix://$HOME/.orbstack/run/docker.sock` env var to fix it.
.PHONY: scan-local
scan-local: IMG=build/bin/image/kubegres:scan-${LOCAL_ARCH}
scan-local: build/linux/${LOCAL_ARCH} docker-buildx ## Scan the docker image for vulnerabilities locally.
@rm -rf ${IMG}
docker build --builder $(DOCKER_BUILDER_NAME) -t ${IMG} . --output type=local,dest=${IMG}
grype ${IMG} --by-cve
scan-local: IMG=kubegres:scan
scan-local: build/linux/${LOCAL_ARCH} docker-build/linux/${LOCAL_ARCH} ## Scan the docker image for vulnerabilities locally.
grype ${IMG}-${LOCAL_ARCH} --by-cve

##@ Deployment

Expand Down