From 71b0e5b614679264907cf074a67d3293c9b02c7e Mon Sep 17 00:00:00 2001 From: Guilherme Macedo Date: Fri, 2 Oct 2026 00:03:40 -0300 Subject: [PATCH] Dowload and decompress Rancher VEX report (#237) Signed-off-by: Guilherme Macedo (cherry picked from commit 9cf7606786c1c31e8a72066790997edb7d69d021) --- .github/workflows/scan.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index a1cb1527..a6be8066 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -16,9 +16,8 @@ jobs: - name: Download Rancher's VEX Hub report run: | - curl -fsSL -H "Accept: application/vnd.git-lfs+json" \ - "https://media.githubusercontent.com/media/rancher/vexhub/main/reports/rancher.openvex.json" \ - -o rancher.openvex.json + curl -fsSOL --retry 3 --retry-all-errors https://github.com/rancher/vexhub/raw/refs/heads/main/reports/rancher.openvex.json.gz + gzip -d rancher.openvex.json.gz - name: Run Trivy vulnerability scanner in repo mode uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 @@ -35,4 +34,4 @@ jobs: - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3.36.2 with: - sarif_file: 'trivy-results.sarif' \ No newline at end of file + sarif_file: 'trivy-results.sarif'