From 646f0088cd20531c8a36e6988a0d6227ef1af223 Mon Sep 17 00:00:00 2001
From: Stefan Saenger <stefan.saenger@vnc.biz>
Date: Wed, 3 Jun 2026 14:12:36 +0200
Subject: [PATCH] fix: improve trivy stage

---
 .gitlab-ci.yml | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index aa4de10..f18db45 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -36,16 +36,18 @@ dev_deploy:
     - master
 
 dev_trivy:
-  image: eu.gcr.io/vnc-development/docker-vnc-runner:latest
+  image: aquasec/trivy:latest
   stage: scan
   script:
-    - apt -y update
-    - apt -y install wget apt-transport-https gnupg lsb-release
-    - wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | apt-key add -
-    - echo "deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main" >> /etc/apt/sources.list.d/trivy.list
-    - apt -y update
-    - apt -y install trivy
-    - trivy image --input scan/mucrest.tgz
+    - trivy image --exit-code 1 --format template --template "@/contrib/junit.tpl" -o mucrest.xml --input scan/mucrest.tgz
+  artifacts:
+    public: false
+    expire_in: 12h
+    paths:
+      - ./*.xml
+    reports:
+      junit:
+      - ./*.xml
   only:
     - master