Merge pull request #2 from reasonerjt/bump-up-trivy-v-56-1

bump up to trivy v0.56.1

Dockerfile

@@ -1,5 +1,5 @@
 # That's the only place where you're supposed to specify version of Trivy.
-ARG TRIVY_VERSION=0.54.1
+ARG TRIVY_VERSION=0.56.1
 
 FROM aquasec/trivy:${TRIVY_VERSION}
 

Dockerfile.dev

@@ -1,8 +1,8 @@
 # That's the only place where you're supposed to specify version of Trivy.
-ARG TRIVY_VERSION=0.46.0
+ARG TRIVY_VERSION=0.56.1
 ARG SKAFFOLD_GO_GCFLAGS
 
-FROM golang:1.21-alpine AS builder
+FROM golang:1.22 AS builder
 
 WORKDIR /go/src/github.com/aquasecurity/harbor-scanner-trivy
 
@@ -30,4 +30,6 @@ COPY --from=builder /go/src/github.com/aquasecurity/harbor-scanner-trivy/scanner
 
 ENV TRIVY_VERSION=${TRIVY_VERSION}
 
+USER scanner
+
 ENTRYPOINT ["/home/scanner/bin/scanner-trivy"]

go.sum

@@ -94,6 +94,7 @@ github.com/gorilla/schema v1.4.1 h1:jUg5hUjCSDZpNGLuXQOgIWGdlgrIdYvgQ0wZtdK1M3E=
 github.com/gorilla/schema v1.4.1/go.mod h1:Dg5SSm5PV60mhF2NFaTV1xuYYj8tV8NOPRo4FggUMnM=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 h1:YBftPWNWd4WwGqtY2yeZL2ef8rHAxPBD8KFhJpmcqms=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0/go.mod h1:YN5jB8ie0yfIUg6VvR9Kz84aCaG7AsGZnLjhHbUqwPg=
+github.com/imdario/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.17.4 h1:Ej5ixsIri7BrIjBkRZLTo6ghwrEtHFk7ijlczPW4fZ4=

test/component/component_test.go

@@ -26,7 +26,7 @@ var (
 	trivyScanner = harbor.Scanner{
 		Name:    "Trivy",
 		Vendor:  "Aqua Security",
-		Version: "0.54.1",
+		Version: "0.56.1",
 	}
 )