ci: fix trivy action

By default it also checks for secrets in compiled Python binary files (/var/lib/syslog-ng-venv/lib/python3.12/site-packages/google/auth/crypt/__pycache__/_python_rsa.cpython-312.pyc) See Python docs for more details https://docs.python.org/3/using/cmdline.html#envvar-PYTHONDONTWRITEBYTECODE Signed-off-by: Szilard Parrag <[email protected]>
axoflow · Oct 9, 2024 · 700286c · 700286c
1 parent ba344fa
commit 700286c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docker/alpine.dockerfile b/docker/alpine.dockerfile
@@ -62,6 +62,7 @@ RUN mkdir packages \
 FROM alpine:3.20
 
 ARG DEBUG
+ENV PYTHONDONTWRITEBYTECODE=true
 
 # https://github.com/opencontainers/image-spec/blob/main/annotations.md
 LABEL maintainer="axoflow.io"