From 4c9041b270546cd08220020c3fb4c4bee2ff046d Mon Sep 17 00:00:00 2001 From: Cian Johnston Date: Fri, 20 Mar 2026 14:52:11 +0000 Subject: [PATCH] chore: evict trivy from the dogfood Dockerfile (#23367) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Remove `TRIVY_VERSION` ARG and trivy CLI install block from `dogfood/coder/Dockerfile` - The `trivy` job in `.github/workflows/security.yaml` is kept — it uses `aquasecurity/trivy-action` pinned to a known-good commit > 🤖 This PR was created with the help of Coder Agents, and was reviewed by my human. 🧑‍💻 --- dogfood/coder/Dockerfile | 4 ---- 1 file changed, 4 deletions(-) diff --git a/dogfood/coder/Dockerfile b/dogfood/coder/Dockerfile index d74a88cdde..ed77878192 100644 --- a/dogfood/coder/Dockerfile +++ b/dogfood/coder/Dockerfile @@ -316,7 +316,6 @@ ARG CLOUD_SQL_PROXY_VERSION=2.2.0 \ KUBECTX_VERSION=0.9.4 \ STRIPE_VERSION=1.14.5 \ TERRAGRUNT_VERSION=0.45.11 \ - TRIVY_VERSION=0.69.2 \ SYFT_VERSION=1.20.0 \ COSIGN_VERSION=2.4.3 \ BUN_VERSION=1.2.15 @@ -355,9 +354,6 @@ RUN curl --silent --show-error --location --fail --output /usr/local/bin/cloud_s # terragrunt for running Terraform and Terragrunt files curl --silent --show-error --location --fail --output /usr/local/bin/terragrunt "https://github.com/gruntwork-io/terragrunt/releases/download/v${TERRAGRUNT_VERSION}/terragrunt_linux_amd64" && \ chmod a=rx /usr/local/bin/terragrunt && \ - # AquaSec Trivy for scanning container images for security issues - curl --silent --show-error --location --fail "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" | \ - tar --extract --gzip --directory=/usr/local/bin --file=- trivy && \ # Anchore Syft for SBOM generation curl --silent --show-error --location --fail "https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_linux_amd64.tar.gz" | \ tar --extract --gzip --directory=/usr/local/bin --file=- syft && \