Set vex notice to off in docker scan (#5372)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
opensearch-project · Mar 7, 2025 · faf1ef9 · faf1ef9
1 parent 6060ef8
commit faf1ef9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/jenkins/docker/docker-scan.jenkinsfile b/jenkins/docker/docker-scan.jenkinsfile
@@ -20,6 +20,7 @@ pipeline {
     environment {
         TRIVY_DB_REPOSITORY = 'public.ecr.aws/aquasecurity/trivy-db'
         TRIVY_JAVA_DB_REPOSITORY = 'public.ecr.aws/aquasecurity/trivy-java-db'
+        TRIVY_DISABLE_VEX_NOTICE = true
     }
     parameters {
         string(