mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-13 03:42:35 -06:00
fd9c46c47a
This is almost what do in nightlies, but: 1. Not pulling docker images, trivy can do that -- we don't deal with changing tags here (latest, edge), but concrete ones that don't get overwritten in dockerhub ever. 2. It's a different, since we don't want nightly to turn red when there is a vulnerability in the latest release, it's two separate concerns. Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>