Populate trivy cache

Signed-off-by: Dimitris Karakasilis <[email protected]>

.github/workflows/release-arm.yaml

@@ -247,10 +247,13 @@ jobs:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
           password: ${{ secrets.QUAY_PASSWORD }}
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build  🔧
         run: |
           earthly -P +all-arm \
@@ -364,10 +367,13 @@ jobs:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
           password: ${{ secrets.QUAY_PASSWORD }}
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build  🔧
         run: |
           earthly -P +all-arm \

.github/workflows/release.yaml

@@ -161,10 +161,13 @@ jobs:
         with:
           repository: quay.io/kairos/packages
           packages: utils/earthly
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build  🔧
         run: |
           earthly +all  \
@@ -412,10 +415,13 @@ jobs:
           packages: utils/earthly
       - name: Login to Quay Registry
         run: echo ${{ secrets.QUAY_PASSWORD }} | docker login -u ${{ secrets.QUAY_USERNAME }} --password-stdin quay.io
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build  🔧
         run: |
           earthly +all  \

.github/workflows/reusable-build-flavor.yaml

@@ -106,10 +106,13 @@ jobs:
       - name: Login to earthly
         run: |
           earthly account login --token ${{ secrets.EARTHLY_TOKEN }}  && earthly org select Kairos
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build PR 🔧
         if: ${{ github.event_name == 'pull_request' }}
         run: |

.github/workflows/reusable-build-provider.yaml

@@ -90,10 +90,13 @@ jobs:
       - name: Login to earthly
         run: |
           earthly account login --token ${{ secrets.EARTHLY_TOKEN }} && earthly org select Kairos
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build PR 🔧
         if: ${{ github.event_name == 'pull_request' }}
         run: |

.github/workflows/reusable-docker-arm-build.yaml

@@ -131,10 +131,13 @@ jobs:
       - name: Login to earthly
         run: |
           earthly account login --token ${{ secrets.EARTHLY_TOKEN }} && earthly org select Kairos
-      - name: Trivy Cache
+      - name: Restore trivy cache
         uses: yogeshlonkar/trivy-cache-action@v0
         with:
           gh-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Populate trivy Cache
+        run: |
+          earthly +trivy-download-db --DIR .trivy
       - name: Build  🔧
         run: |
           earthly -P +all-arm \

Earthfile

@@ -772,6 +772,7 @@ trivy-download-db:
     ARG DIR=trivy-cache
     FROM aquasec/trivy:$TRIVY_VERSION
 
+    COPY $DIR /trivy-cache
     RUN /usr/local/bin/trivy --cache-dir /trivy-cache fs --download-db-only
     SAVE ARTIFACT /trivy-cache AS LOCAL $DIR