fix(ci): keep trivy cache out of docker image

2026-09-04 23:17:20 +08:00 · 2026-08-23 10:17:27 +08:00
parent 00bf7885c1
commit e16c28099b
4 changed files with 5 additions and 0 deletions
@@ -76,6 +76,7 @@ def test_release_scans_both_architectures_before_registry_login_and_publish() ->
        "Scan arm64 candidate vulnerabilities",
    ):
        scan = indexed[name]
+        assert scan["with"]["cache-dir"] == "${{ runner.temp }}/trivy"
        assert scan["uses"] == (
            "aquasecurity/trivy-action@"
            "a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8"