BST-17725: add skip version check flag to all trivy scanners (#252)

Author: scott-boost

scanners/boostsecurityio/boost-sca/module.yaml

@@ -106,8 +106,15 @@ steps:
           TRIVY_ADDITIONAL_ARGS: ${TRIVY_ADDITIONAL_ARGS---ignore-unfixed}
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1,ghcr.io/aquasecurity/trivy-java-db:1
-        run: |
-          $SETUP_PATH/trivy fs --cache-dir=/tmp/trivy/ --format=cyclonedx --license-full --no-progress --scanners vuln . 2>&1
+        run: >
+          $SETUP_PATH/trivy fs 
+          --cache-dir=/tmp/trivy/
+          --format=cyclonedx
+          --license-full
+          --no-progress
+          --scanners vuln
+          --skip-version-check 
+          . 2>&1
       format: cyclonedx
       post-processor:
         docker:

scanners/boostsecurityio/trivy-fs/module.yaml

@@ -106,8 +106,14 @@ steps:
           TRIVY_ADDITIONAL_ARGS: ${TRIVY_ADDITIONAL_ARGS---ignore-unfixed}
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1,ghcr.io/aquasecurity/trivy-java-db:1
-        run: |
-          $SETUP_PATH/trivy fs ${TRIVY_ADDITIONAL_ARGS} --format json --no-progress --scanners vuln . 2>&1
+        run: >
+          $SETUP_PATH/trivy fs 
+          ${TRIVY_ADDITIONAL_ARGS} 
+          --format json
+          --no-progress
+          --scanners vuln
+          --skip-version-check 
+          . 2>&1
       format: sarif
       post-processor:
         docker:

scanners/boostsecurityio/trivy-image/module.yaml

@@ -60,9 +60,14 @@ steps:
           TRIVY_ADDITIONAL_ARGS: ${TRIVY_ADDITIONAL_ARGS---ignore-unfixed}
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1,ghcr.io/aquasecurity/trivy-java-db:1
-        run: |
-            $SETUP_PATH/trivy image ${TRIVY_ADDITIONAL_ARGS} --format json --scanners vuln \
-              --quiet ${BOOST_IMAGE_NAME}
+        run: >
+          $SETUP_PATH/trivy image 
+          ${TRIVY_ADDITIONAL_ARGS} 
+          --format json 
+          --scanners vuln
+          --skip-version-check 
+          --quiet 
+          ${BOOST_IMAGE_NAME}
       format: sarif
       post-processor:
         docker:

scanners/boostsecurityio/trivy-sbom-image/module.yaml

@@ -58,8 +58,13 @@ steps:
           IMAGE_NAME: ${BOOST_IMAGE_NAME}
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1,ghcr.io/aquasecurity/trivy-java-db:1
-        run: |
-            $SETUP_PATH/trivy image ${TRIVY_ADDITIONAL_ARGS} --format cyclonedx --license-full ${BOOST_IMAGE_NAME}
+        run: >
+          $SETUP_PATH/trivy image 
+          ${TRIVY_ADDITIONAL_ARGS}
+          --format cyclonedx 
+          --license-full
+          --skip-version-check
+          ${BOOST_IMAGE_NAME}
       format: cyclonedx
       post-processor:
         docker:

scanners/boostsecurityio/trivy-sbom/module.yaml

@@ -103,8 +103,15 @@ steps:
           NO_COLOR: "true"
           TRIVY_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2
           TRIVY_JAVA_DB_REPOSITORY: public.ecr.aws/aquasecurity/trivy-java-db:1,ghcr.io/aquasecurity/trivy-java-db:1
-        run: |
-            $SETUP_PATH/trivy fs --format=cyclonedx --license-full --no-progress --scanners vuln --cache-dir=/tmp/trivy/ . 2>&1
+        run: >
+          $SETUP_PATH/trivy fs
+          --format=cyclonedx
+          --license-full
+          --no-progress
+          --scanners vuln
+          --cache-dir=/tmp/trivy/
+          --skip-version-check 
+          . 2>&1
       format: cyclonedx
       post-processor:
         docker: