fix(cve-scan-patching): add buildkit cache prune after each image pat…

…ching
sighupio · Sep 25, 2024 · 8437b12 · 8437b12
1 parent a5bbe04
commit 8437b12
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CVEs/Makefile b/CVEs/Makefile
@@ -2,7 +2,7 @@
 
 KFD_VERSIONS := $(shell find . -type d -maxdepth 1 -mindepth 1 | cut -d/ -f2 | sort )
 
-all: scan patch
+all: scan-parallel patch
 
 scan:
 	@for version in $(KFD_VERSIONS); do \

diff --git a/scripts/patch_images_with_copacetic.sh b/scripts/patch_images_with_copacetic.sh
@@ -100,6 +100,7 @@ function patch_image() {
 
   echo ">>>>>>>>>>>>>>>>>>> CLEANUP $image_to_patch <<<<<<<<<<<<<<<<<<<<<"
   docker rmi -f "$image_to_patch"
+  buildctl --addr tcp://127.0.0.1:8888 prune
   if [ "$secured_image" != "$image_to_patch" ]
   then
     echo ">>>>>>>>>>>>>>>>>>> CLEANUP $secured_image <<<<<<<<<<<<<<<<<<<<<"